diff --git a/include/mysqli.php b/include/mysqli.php index d8ce115ccfc454369f8a8a89094dd5ce124c1016..86b5a3b7fe0c6a789dfa515afae6f52ce793a76d 100644 --- a/include/mysqli.php +++ b/include/mysqli.php @@ -239,7 +239,7 @@ function db_input($var, $quote=true) { if(is_array($var)) return array_map('db_input', $var, array_fill(0, count($var), $quote)); - elseif($var && preg_match("/^\d+(\.\d+)?$/", $var)) + elseif($var && preg_match("/^(?:\d+\.\d+|[1-9]\d*)$/S", $var)) return $var; return db_real_escape($var, $quote);