@@ -25,16 +25,20 @@ public static function mysql_escape($fieldValue)
2525 }
2626
2727 if (!empty ($ fieldValue ) && is_string ($ fieldValue )) {
28- return self ::safeString ($ fieldValue );
28+ return str_replace (
29+ ['\\' , "\0" , "\n" , "\r" , "' " , '" ' , "\x1a" ],
30+ ['\\\\' , '\\0 ' , '\\n ' , '\\r ' , "\\' " , '\\" ' , '\\Z ' ],
31+ $ fieldValue
32+ );
2933 }
3034
3135 return $ fieldValue ;
3236 }
3337
34- protected static function safeString ($ fieldValue ){
38+ protected static function safeJsonString ($ fieldValue ){
3539 return str_replace (
36- ['\\' , "\0" , "\n" , "\r" , " ' " , ' " ' , "\x1a " ],
37- ['\\\\' , '\\ 0 ' , '\\ n ' , '\\ r ' , "\\ ' " , '\\ " ' , '\\ Z ' ],
40+ [" ' " ],
41+ [" \' " ],
3842 $ fieldValue
3943 );
4044 }
@@ -54,7 +58,7 @@ protected static function safeJson($jsonData,$asArray = false){
5458 if (self ::is_json ($ value )){
5559 $ safeJsonData [$ key ] = self ::safeJson ($ jsonData ,true );
5660 }elseif (is_string ($ value )){
57- $ safeJsonData [$ key ] = self ::safeString ($ value );
61+ $ safeJsonData [$ key ] = self ::safeJsonString ($ value );
5862 }else {
5963 $ safeJsonData [$ key ] = $ value ;
6064 }
0 commit comments