Changed database access to PDO using prepared statements

2023-02-22 10:50:24 +01:00
parent a4ecd1bff7
commit 7c300e0a8f
132 changed files with 5364 additions and 6091 deletions
--- a/lib/functions.php
+++ b/lib/functions.php
@@ -74,9 +74,6 @@ function sanitize($input) {
    // convert special chars
    $input = htmlentities($input,ENT_QUOTES,'UTF-8');

-    // make sql ready
-    $input = mysqli_real_escape_string($dblink, $input);
-
    // and return
    return $input;
 }