phpBB.de

Code: Alles auswählen

	// check if the comment is blank, if so trigger a error.
		if(!request_var('comment_text','', true))
		{
			trigger_error($user->lang['BLANK_COMMENT']);
		}
	
		$time 				= time();
		$comment_id 		= request_var('comment_id', 0);
		$comment_poster_id 	= $user->data['user_id'];
		$comment_author 	= $user->data['username'];;
		$comment_text 		= request_var('comment_text','', true);
		$comment_to_id 		= request_var('comment_to_id', 0);
		$uid = $bitfield 	= $options = ''; 
		$allow_bbcode 		= $allow_urls = $allow_smilies = true;

		generate_text_for_storage($comment_text, $uid, $bitfield, $options, $allow_bbcode, $allow_urls, $allow_smilies);

		$sql_ary = (array(
    		'comment_date'       		=> $time,
			'comment_id'        		=> $comment_id,
			'comment_poster_id'         => $comment_poster_id,
			'comment_to_id'         	=> $comment_to_id,
			'comment_author'            => $comment_author,
			'comment_text'              => $comment_text,
    		'bbcode_uid'        		=> $uid,
    		'bbcode_bitfield'   		=> $bitfield,					
   			'bbcode_options'    		=> $options,
	
		));

		$sql = 'INSERT INTO ' . COMMENT_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary);
		$db->sql_query($sql);

Code: Alles auswählen

$string = $db->sql_escape(htmlentities($string)
$db->sql_query('INSERT INTO' . BLA_TABLE . "bt SET bt.blubb = '$string'");

Code: Alles auswählen

$username_replace = str_replace('*', $db->any_char, utf8_clean_string($username));	
# wenn bei der suche ein jocker verwendet wird, soll er ersetzt werden			

$sql_where .= ($username_replace) ? 'username_clean LIKE ' . $db->sql_escape($username_replace) : '';

			$sql = "SELECT *
			FROM " . USERS_TABLE . "
			WHERE $sql_where";
		$result = $db->sql_query($sql);