Changeset 16379 for branches/feature-module-update/html

Timestamp:

2007/10/11 16:41:56 (17 years ago)

Author:

nanasess

Message:

addslashes() を SC_Utils_Ex::sfQuoteSmart() に修正

Location:

branches/feature-module-update/html/mobile

Files:

• regist/index.php (modified) (2 diffs)
• shopping/deliv_addr.php (modified) (1 diff)

branches/feature-module-update/html/mobile/regist/index.php

@@ -87 +87 @@
     $arrRet = $objQuery->select("point", "dtb_customer", $where, array($array["id"]));
     // 会員登録時の加算ポイント(購入時会員登録の場合は、ポイント加算）
-    $arrRegist['point'] = $arrRet[0]['point'] + addslashes($arrInfo['welcome_point']);
+    $arrRegist['point'] = $arrRet[0]['point'] + $arrInfo['welcome_point'];
     
     $objQuery->update("dtb_customer", $arrRegist, $where, array($array["id"]));
@@ -128 +128 @@
     }
 
-    $objQuery->update("dtb_customer", $arrRegistMail, "email = '" .addslashes($email). "' AND del_flg = 0");
+    $objQuery->update("dtb_customer", $arrRegistMail, "email = " . SC_Utils_Ex::sfQuoteSmart($email). " AND del_flg = 0");
     $objConn->query("COMMIT");
         

branches/feature-module-update/html/mobile/shopping/deliv_addr.php

@@ -210 +210 @@
     $objConn->query("BEGIN");
     if ($array['other_deliv_id'] != ""){
-        $objConn->autoExecute("dtb_other_deliv", $arrRegist, "other_deliv_id='" .addslashes($array["other_deliv_id"]). "'");
+        $objConn->autoExecute("dtb_other_deliv", $arrRegist, "other_deliv_id=" SC_Utils_Ex::sfQuoteSmart($array["other_deliv_id"]));
     }else{
         $objConn->autoExecute("dtb_other_deliv", $arrRegist);