*
* Copyright 1999-2001, VA Linux Systems, Inc.
* Copyright 2002-2004, GForge, LLC
+ * Copyright 2009, Roland Mas
*
* This file is part of FusionForge.
*
function createTrackers() {
// first, check if trackers already exist
- $res=db_query("SELECT * FROM artifact_group_list
- WHERE group_id='".$this->Group->getID()."' AND datatype > 0");
+ $res = db_query_params ('SELECT * FROM artifact_group_list
+ WHERE group_id=$1 AND datatype > 0',
+ array ($this->Group->getID()));
if (db_numrows($res) > 0) {
return true;
}
//
// Create a tracker
//
- if (!$at->create(addslashes($trk[0]), addslashes($trk[1]), $trk[2], $trk[3], $trk[4], $trk[5], $trk[6], $trk[7], $trk[8], $trk[9], $trk[10])) {
+ if (!$at->create($trk[0], $trk[1], $trk[2], $trk[3], $trk[4], $trk[5], $trk[6], $trk[7], $trk[8], $trk[9], $trk[10])) {
db_rollback();
$this->setError('Error Creating Tracker: '.$at->getErrorMessage());
return false;
foreach ($trk[11] AS $fld) {
$aef = new ArtifactExtraField($at);
//print($fld[0])."***|";
- if (!$aef->create(addslashes($fld[0]), $fld[1], $fld[2], $fld[3], $fld[4])) {
+ if (!$aef->create($fld[0], $fld[1], $fld[2], $fld[3], $fld[4])) {
db_rollback();
$this->setError('Error Creating Extra Field: '.$aef->getErrorMessage());
return false;
$el_name = $el[0];
$el_status = $el[1];
}
- if (!$aefe->create(addslashes($el_name),$el_status)) {
+ if (!$aefe->create($el_name,$el_status)) {
db_rollback();
$this->setError('Error Creating Extra Field Element: '.$aefe->getErrorMessage());
return false;