Search found 5 matches
- Mon Jan 26, 2009 11:36 pm
- Forum: Developers Discussion
- Topic: Need some help understanding parameterized sql queries
- Replies: 6
- Views: 2251
Re: Need some help understanding parameterized sql queries
OK, well I haven't really solved the issue, but I guess I'm happy for now. It has something to do with the fact that the form was submitted through the front-end, and the params are encoded by the CMSMS system--for security, maybe? SO...I looked at the news module again, in the action.fesubmit.php...
- Mon Jan 26, 2009 10:35 pm
- Forum: Developers Discussion
- Topic: Need some help understanding parameterized sql queries
- Replies: 6
- Views: 2251
Re: Need some help understanding parameterized sql queries
Well, I made a little progress. I discovered the function cms_htmlentities in /lib/misc.functions.php is what's doing the encoding.
- Mon Jan 26, 2009 10:21 pm
- Forum: Developers Discussion
- Topic: Need some help understanding parameterized sql queries
- Replies: 6
- Views: 2251
Re: Need some help understanding parameterized sql queries
Yes...even when I disable TinyMCE and enter some HTML manually, the values all still get encoded. I'm getting more confused all the time. And no, I don't want to decode params if I can figure out how to stop them from being encoded in the first place. I'm going to start going through the CMSMS co...
- Mon Jan 26, 2009 5:34 pm
- Forum: Developers Discussion
- Topic: Need some help understanding parameterized sql queries
- Replies: 6
- Views: 2251
Re: Need some help understanding parameterized sql queries
You're right plger, it's not the Execute function, the actual params are encoded. Hmm...should I decode them, or is there a way to disable this automatic encoding? I keep looking at the news module, and the params aren't encoded like this there.
- Sat Jan 24, 2009 9:38 pm
- Forum: Developers Discussion
- Topic: Need some help understanding parameterized sql queries
- Replies: 6
- Views: 2251
Need some help understanding parameterized sql queries
Hi All, forgive me if this is not the right place to post this...I'm new to CMSMS and am attempting to develop my first module, but I have a stupid question: I'm using parameterized queries to update my database, E.G: $db->Execute( $mysqlquery, array(...$params...) ) . And I'm using the TinyMCE edi...