From 11a052a6527da67cb5089bbc0dee494d47997e03 Mon Sep 17 00:00:00 2001
From: thepurpleblob <thepurpleblob>
Date: Mon, 11 Apr 2005 12:29:17 +0000
Subject: [PATCH] Added function addslashes_object().

---
 lib/datalib.php | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/lib/datalib.php b/lib/datalib.php
index 06a6848b6b7..6209eb942ba 100644
--- a/lib/datalib.php
+++ b/lib/datalib.php
@@ -1146,6 +1146,24 @@ function insert_record($table, $dataobject, $returnid=true, $primarykey='id') {
     return (integer)$id;
 }
 
+/** 
+ * Escape all dangerous characters in a data record
+ *
+ * $dataobject is an object containing needed data
+ * Run over each field exectuting addslashes() function
+ * to escape SQL unfriendly characters (e.g. quotes)
+ * Handy when writing back data read from the database
+ *
+ * @param $dataobject Object containing the database record
+ * @return object Same object with neccessary characters escaped
+ */
+function addslashes_object( $dataobject ) {
+    $a = get_object_vars( $dataobject);
+    foreach ($a as $key=>$value) {
+      $a[$key] = addslashes( $value );
+    }
+    return (object)$a;
+}
 
 /**
  * Update a record in a table
@@ -1157,7 +1175,7 @@ function insert_record($table, $dataobject, $returnid=true, $primarykey='id') {
  * @uses $CFG
  * @uses $db
  * @param string $table The database table to be checked against.
- * @param array $dataobject An associative array with contents equal to fieldname=>fieldvalue. Must have an entry for 'id' to map to the table specified.
+ * @param array $dataobject An object with contents equal to fieldname=>fieldvalue. Must have an entry for 'id' to map to the table specified.
  * @return boolean
  * @todo Finish documenting this function. Dataobject is actually an associateive array, correct?
  */