diff --git a/kero/sine/SENE_MySQLi_Engine.php b/kero/sine/SENE_MySQLi_Engine.php index 0d7f0cb..4028e22 100644 --- a/kero/sine/SENE_MySQLi_Engine.php +++ b/kero/sine/SENE_MySQLi_Engine.php @@ -1240,13 +1240,15 @@ public function insert($table, $datas=array(), $multi_array=0, $is_debug=0) $sql .= ') VALUES('; foreach ($datas as $key=>$val) { - if ($val=='NOW()' || $val=='now()') { - $sql .=''.$val.','; - } elseif (strtolower($val)=='null') { - $sql .='NULL,'; - } else { - $sql .=''.$this->esc($val).','; - } + if ($val=='NOW()' || $val=='now()') { + $sql .=''.$val.','; + } else if (strtolower($val)=='null') { + $sql .='NULL,'; + } else if (stripos($val, "AES_ENCRYPT(") !== false || stripos($val, "AES_DECRYPT(") !== false) { + $sql .= $val.','; + } else { + $sql .=''.$this->esc($val).','; + } } $sql = rtrim($sql, ','); $sql .= ');'; @@ -1272,6 +1274,8 @@ public function update($table, $datas=array(), $is_debug=0) foreach ($datas as $key=>$val) { if ($val=='now()' || $val=='NOW()' || $val=="NULL" || $val=='null') { $sql .='`'.$key.'` = '.$val.','; + } else if (stripos($val, "AES_ENCRYPT(") !== false || stripos($val, "AES_DECRYPT(") !== false) { + $sql .= $val.','; } else { $sql .='`'.$key.'` = '.$this->esc($val).','; }