addslashes 使用時機

[leeyc]

// 材料進貨明細 檢查是否重複？ C04 出貨單號 C12 訂單號碼
                    $rr = OBW::SEL("select * from ".$this->_DC['DB']['PREFIX']."_FMATERIAL 
                                     where C01 = '$C01' and C02 = '$C02' and C03 = '".addslashes($C03)."' 
                                       and C04 = '$C04' and C12 = '$C12' "); 
                    if ($rr['SN'] > 0) {
                        $errMsg .= ($errMsg ? "\\n" : "")."$C01 && $C02 && $C03 && $C04 && $C12 資料重複 ！";
                    } else {
                        $SN = $this->PDO->sequence("FMATERIAL"); // 材料進貨明細
                        $values = array();
                        $values['SN'] = $SN;
                        $values['C01'] = $C01; // 
                        $values['C02'] = $C02; // 
                        $values['C03'] = $C03; // 儲存資料時 不用加 addslashes
                        $this->savePostData($values, $i);
                        $values['MUSER'] = $_SESSION['DC_EMP_NAME']; // 
                        $values['MDATE'] = date(__DC_FORMAT_DATETIME__); // 
                        $values['IEMP'] = $_SESSION['DC_EMP_SN']; //
                        OBW::INS("FMATERIAL", $values);
                        $has = true;
                    }