db_escape_string: specify link parameter for consistency; sessions: do not force...

[tt-rss.git] / include / db-prefs.php

diff --git a/include/db-prefs.php b/include/db-prefs.php
index 641e9d1ddd6ab919c09735c4db2372ec0f83bb6a..f6a78939b589b5cd5da85e8b07de5124d429090a 100644 (file)
--- a/include/db-prefs.php
+++ b/include/db-prefs.php
@@ -44,7 +44,7 @@
 
        function get_pref($link, $pref_name, $user_id = false, $die_on_error = false) {
 
-               $pref_name = db_escape_string($pref_name);
+               $pref_name = db_escape_string($link, $pref_name);
                $prefs_cache = true;
                $profile = false;
 
@@ -115,8 +115,8 @@
        }
 
        function set_pref($link, $pref_name, $value, $user_id = false, $strip_tags = true) {
-               $pref_name = db_escape_string($pref_name);
-               $value = db_escape_string($value, $strip_tags);
+               $pref_name = db_escape_string($link, $pref_name);
+               $value = db_escape_string($link, $value, $strip_tags);
 
                if (!$user_id) {
                        $user_id = $_SESSION["uid"];