Fixed: FS#945 - Table columns should be quoted in Server/lib/classes/db_mysql.inc.php

Author: tbrehm

server/lib/classes/db_mysql.inc.php

@@ -189,7 +189,8 @@ function toLower($record) {
 		return $out;
 		}
 
-       
+       /*
+	   //* These functions are deprecated and will be removed.
        function insert($tablename,$form,$debug = 0)
        {
          if(is_array($form)){
@@ -224,6 +225,7 @@ function update($tablename,$form,$bedingung,$debug = 0)
       		 if($debug == 1) echo "mySQL Error Message: ".$this->errorMessage;
            }
        }
+	   */
 
        public function closeConn()
     	{

server/plugins-available/apache2_plugin.inc.php

@@ -144,8 +144,8 @@ function ssl($event_name,$data) {
     		exec("chmod 400 $key_file2");
     		@unlink($config_file);
     		@unlink($rand_file);
-    		$ssl_request = file_get_contents($csr_file);
-    		$ssl_cert = file_get_contents($crt_file);
+    		$ssl_request = $app->db->quote(file_get_contents($csr_file));
+    		$ssl_cert = $app->db->quote(file_get_contents($crt_file));
 			/* Update the DB of the (local) Server */
     		$app->db->query("UPDATE web_domain SET ssl_request = '$ssl_request', ssl_cert = '$ssl_cert' WHERE domain = '".$data["new"]["domain"]."'");
 			$app->db->query("UPDATE web_domain SET ssl_action = '' WHERE domain = '".$data["new"]["domain"]."'");