db_escape_string: remove tags by default (refs #323)

2026-01-30 11:37:10 +00:00 · 2011-02-19 16:55:36 +03:00
parent 6853521166
commit c7a8deacd9
2 changed files with 4 additions and 2 deletions
--- a/db.php
+++ b/db.php
@@ -41,7 +41,9 @@ function db_connect($host, $user, $pass, $db) {
 	}
 }

-function db_escape_string($s) {
+function db_escape_string($s, $strip_tags = true) {
+	if ($strip_tags) $s = strip_tags($s);
+
 	if (DB_TYPE == "pgsql") {	
 		return pg_escape_string($s);
 	} else {