db_escape_string: specify link parameter for consistency; sessions: do not force...

[tt-rss.git] / plugins / mail / init.php

diff --git a/plugins/mail/init.php b/plugins/mail/init.php
index 30a417a1b44104b2caa38f3b57e2580cb962c469..a4817a15d11450f0a8100b998277902d0e68c6b9 100644 (file)
--- a/plugins/mail/init.php
+++ b/plugins/mail/init.php
@@ -30,7 +30,7 @@ class Mail extends Plugin {
 
        function emailArticle() {
 
-               $param = db_escape_string($_REQUEST['param']);
+               $param = db_escape_string($this->link, $_REQUEST['param']);
 
                $secretkey = sha1(uniqid(rand(), true));
 
@@ -181,7 +181,7 @@ class Mail extends Plugin {
                        if (!$rc) {
                                $reply['error'] =  $mail->ErrorInfo;
                        } else {
-                               save_email_address($this->link, db_escape_string($destination));
+                               save_email_address($this->link, db_escape_string($this->link, $destination));
                                $reply['message'] = "UPDATE_COUNTERS";
                        }
 
@@ -193,7 +193,7 @@ class Mail extends Plugin {
        }
 
        function completeEmails() {
-               $search = db_escape_string($_REQUEST["search"]);
+               $search = db_escape_string($this->link, $_REQUEST["search"]);
 
                print "<ul>";