Rosanne DiMesio : Correct function name

[Jeremy Newman]

Module: appdb
Branch: master
Commit: f70d54d8a0ea4dee0fa4b5367986091ed7ef5b72
URL:    http://source.winehq.org/git/appdb.git/?a=commit;h=f70d54d8a0ea4dee0fa4b5367986091ed7ef5b72

Author: Rosanne DiMesio <dimesio at earthlink.net>
Date:   Fri Apr 28 08:16:49 2017 -0500

Correct function name

The function is defined in query.php as query_escape_string, not query_real_escape_string. Fixes bug 41785 and a similar issue with the Comments Management admin page.

Signed-off-by: Rosanne DiMesio <dimesio at earthlink.net>
Signed-off-by: Jeremy Newman <jnewman at codeweavers.com>

---

 include/comment.php       | 6 +++---
 include/objectManager.php | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/include/comment.php b/include/comment.php
index f682ecc..c2c425d 100644
--- a/include/comment.php
+++ b/include/comment.php
@@ -327,13 +327,13 @@ class Comment {
 
         if($iNumRows)
         {
-            $iStart = query_real_escape_string($iStart);
-            $iNumRows = query_real_escape_string($iNumRows);
+            $iStart = query_escape_string($iStart);
+            $iNumRows = query_escape_string($iNumRows);
             $sLimit = " LIMIT $iStart,$iNumRows";
         }
 
         if($sOrderBy)
-            $sOrderBy = " ORDER BY ".query_real_escape_string($sOrderBy);
+            $sOrderBy = " ORDER BY ".query_escape_string($sOrderBy);
 
         $hResult = query_parameters("SELECT * FROM appComments$sExtraTables$sWhereFilter$sOrderBy$sLimit");
 
diff --git a/include/objectManager.php b/include/objectManager.php
index 182a8b9..10c52d3 100644
--- a/include/objectManager.php
+++ b/include/objectManager.php
@@ -1749,10 +1749,10 @@ class ObjectManager
                 $iRows = $oObject->objectGetEntriesCount($sState);
             } else
             {
-                $iRows = query_real_escape_string($iRows);
+                $iRows = query_escape_string($iRows);
             }
 
-            $iStart = query_real_escape_string($iStart);
+            $iStart = query_escape_string($iStart);
 
             $sLimit = " LIMIT $iStart,$iRows";
         }