[geeklog-devel] MS SQL Upgrade

[Michael Jervis]

On Fri, May 23, 2008 at 1:13 PM, Randy Kolenko <Randy.Kolenko at nextide.ca> wrote:
> We'll have to replace the mysql_real_escape_string function with an
> mssql equivalent.
> Since there is none, we'll have to revert to **shudder** addslashes
> dependent upon magic quotes being on/off.

ARgh. My eyes didn't even pick up it was mysql_real not mssql_...

Surely we need to do a replace of ' with '' not an addslashes?