Security issue

[eluser]nebulom[/eluser]
I've added the

Code:

// escape single quotes and double quotes
           $str = str_replace("'", "''", $str);

after the

Code:

function escape_str($str, $like = FALSE)
    {
        if (is_array($str))
        { ...

in oci8 driver and it works. Hopefully this solves it. Anyone has a better idea? Thanks a lot.