Revize 5d106402

Re #7580 přihlášení uživatele v arabic

old/html/multidic/classes/db.php

@@ -6 +6 @@
  *
  * $Id: db_pgsql.inc,v 1.9 2002/08/26 08:27:43 richardarcher Exp $
  *
- */ 
+ */
 
 class DB_Sql {
   var $Host     = "Filek.cz";
@@ -22 +22 @@
   /** @var mysqli */
   var $connection = null;
   var $Debug = 0;
-  
+
   /* public: constructor */
   function __construct($query = "") {
       $this->query($query);
@@ -37 +37 @@
     }
   }
 
+    function escape_string($string)
+    {
+        if ($this->connection == null)
+        {
+            $this->connection = new mysqli($this->Host, $this->User, $this->Password, $this->Database);
+            $this->connection->set_charset("utf8");
+        }
+        return $this->connection->real_escape_string($string);
+    }
+
   function query(string $Query_String) {
     /* No empty queries, please, since PHP4 chokes on them. */
     if ($Query_String == "")
@@ -47 +57 @@
       return 0;
 
     $this->connect();
-    
-    if ($this->Debug) 
+
+    if ($this->Debug)
       printf("<br>Debug: query = %s<br>\n", $Query_String);
 
     $this->result = $this->connection->query($Query_String);
@@ -59 +69 @@
 
     return $this->result;
   }
-  
+
   function next_record() {
     $this->row = mysqli_fetch_row($this->result);
     return $this->row;
@@ -117 +127 @@
   function f($Name) {
     return $this->result[$Name];
   }
-  
+
   function halt($msg) {
     printf("</td></tr></table><b>Database error:</b> %s<br>\n", $msg);
     printf("<b>PostgreSQL Error</b>: %s (%s)<br>\n",

old/html/multidic/functions/dictionary.php

@@ -47 +47 @@
   global $_SESSION;
   if (!Empty($jmeno) && !Empty($heslo)) {
     $DB = new DB_Sql();
-    $DB->query( "select * " .
-    		"from \"user\" " .
-    		"where nick = '".pg_escape_string($jmeno)."' " .
-    				"and pass = '".pg_escape_string($heslo)."'");//, array($jmeno, $heslo) );
-    $DB->next_record();
+    $result = $DB->query( "select * " .
+    		"from user " .
+    		"where nick = '".$DB->escape_string($jmeno)."' " .
+    				"and pass = '".$DB->escape_string($heslo)."'");//, array($jmeno, $heslo) );
     if ($DB->num_rows() != 1)
       return false;
     session_regenerate_id();