Sarjuuk fe42156825 revisited sql escaping ... in general, its not nessecary to manually apply escapes - if passed as param to DB::DBType()->queryFunc() its escaped by DBsimple - if passed as condition its escaped by BaseType - if you do your own query use DB::DBType()->escape() on strings and intVal() respectively - fixed use of HAVING in CreatureListFilter - allow for exclude-only searches in Filter - BaseType no longer adds %-wildcards to strings. Do this manually if ever nessecary.		2014-03-28 20:38:51 +01:00
..
libs	fixed Database error handling	2014-03-14 15:28:30 +01:00
types	revisited sql escaping	2014-03-28 20:38:51 +01:00
community.class.php	item another one >.<	2013-10-09 21:30:28 +02:00
database.class.php	fixed Database error handling	2014-03-14 15:28:30 +01:00
defines.php	item: implemented xml-feed (guess, i do see the point now)	2014-03-23 13:58:43 +01:00
kernel.php	work against profiler	2014-03-28 10:37:19 +01:00
user.class.php	moved config to databse (except databse credentials of course)	2014-03-19 00:15:58 +01:00
utilities.php	revisited sql escaping	2014-03-28 20:38:51 +01:00