Remove cp1251. Я сильно недооценивал трудолюбие неизвестного кодера.
This commit is contained in:
@@ -39,10 +39,10 @@ if($u->room['file']=='_shop_referal_')
|
||||
|
||||
$itm['gtxt1'] = str_replace('\x3C','<',$itm['gtxt1']);
|
||||
$itm['gtxt1'] = str_replace('\x3','>',$itm['gtxt1']);
|
||||
$itm['gtxt1'] = htmlspecialchars($itm['gtxt1'],NULL,'cp1251');
|
||||
$itm['gtxt1'] = htmlspecialchars($itm['gtxt1'],NULL);
|
||||
$itm['gtxt2'] = str_replace('\x3C','<',$itm['gtxt2']);
|
||||
$itm['gtxt2'] = str_replace('\x3','>',$itm['gtxt2']);
|
||||
$itm['gtxt2'] = htmlspecialchars($itm['gtxt2'],NULL,'cp1251');
|
||||
$itm['gtxt2'] = htmlspecialchars($itm['gtxt2'],NULL);
|
||||
|
||||
$upd = mysql_query('UPDATE `items_users` SET `data` = "'.$itm['data'].'",`gtxt1` = "'.mysql_real_escape_string($itm['gtxt1']).'",`gtxt2` = "'.mysql_real_escape_string($itm['gtxt2']).'", `uid` = "'.$to['id'].'", `gift` = "'.$u->info['login'].'",`time_create` = "'.time().'" WHERE `id` = "'.$itm['id'].'" LIMIT 1');
|
||||
$whos = mysql_fetch_array(mysql_query('SELECT `login` FROM `users` WHERE `id` = "'.$to['id'].'" LIMIT 1'));
|
||||
@@ -76,10 +76,10 @@ if($u->room['file']=='_shop_referal_')
|
||||
|
||||
$itm['gtxt1'] = str_replace('\x3C','<',$itm['gtxt1']);
|
||||
$itm['gtxt1'] = str_replace('\x3','>',$itm['gtxt1']);
|
||||
$itm['gtxt1'] = htmlspecialchars($itm['gtxt1'],NULL,'cp1251');
|
||||
$itm['gtxt1'] = htmlspecialchars($itm['gtxt1'],NULL);
|
||||
$itm['gtxt2'] = str_replace('\x3C','<',$itm['gtxt2']);
|
||||
$itm['gtxt2'] = str_replace('\x3','>',$itm['gtxt2']);
|
||||
$itm['gtxt2'] = htmlspecialchars($itm['gtxt2'],NULL,'cp1251');
|
||||
$itm['gtxt2'] = htmlspecialchars($itm['gtxt2'],NULL);
|
||||
|
||||
$upd = mysql_query('UPDATE `items_users` SET `data` = "'.$itm['data'].'",`gtxt1` = "'.mysql_real_escape_string($itm['gtxt1']).'",`gtxt2` = "'.mysql_real_escape_string($itm['gtxt2']).'", `uid` = "'.$to['id'].'", `gift` = "'.$u->info['login'].'",`time_create` = "'.time().'" WHERE `id` = "'.$itm['id'].'" LIMIT 1');
|
||||
$whos = mysql_fetch_array(mysql_query('SELECT `login` FROM `users` WHERE `id` = "'.$to['id'].'" LIMIT 1'));
|
||||
|
||||
Reference in New Issue
Block a user