Browse Source

Avoid sql injection on edge cases

Tobias Reich 10 years ago
parent
commit
dd0171c726
1 changed files with 3 additions and 0 deletions
  1. 3 0
      php/modules/db.php

+ 3 - 0
php/modules/db.php

@@ -25,6 +25,9 @@ function dbConnect() {
     if (!$database->query("SELECT * FROM lychee_photos, lychee_albums, lychee_settings;"))
     	if (!createTables($database)) exit('Error: Could not create tables!');
 
+    // Avoid sql injection
+    $database->set_charset('GBK');
+
     return $database;
 
 }