--- functions.inc.php.bak	Fri Feb  2 22:04:53 2007
+++ functions.inc.php	Fri Feb  2 22:04:53 2007
@@ -129,7 +129,11 @@
    if (get_magic_quotes_gpc () == 0)
    {
       if ($CONF['database_type'] == "mysql")  $escaped_string = mysql_real_escape_string ($string);
-      if ($CONF['database_type'] == "mysqli")  $escaped_string = mysqli_real_escape_string ($string);
+      if ($CONF['database_type'] == "mysqli") { 
+          $link = db_connect(); 
+          $escaped_string = mysqli_real_escape_string ($link,$string); 
+          mysqli_close ($link); 
+          }
       if ($CONF['database_type'] == "pgsql")  $escaped_string = pg_escape_string ($string);
    }
    else