function DoSaveComment() { $this->post['name'] = FSS_Input::getString('name', ''); $this->post['commentid'] = FSS_Input::getInt('commentid', 0); $this->post['email'] = FSS_Input::getEMail('email', ''); $this->post['website'] = FSS_Input::getURL('website', ''); $this->post['body'] = FSS_Input::getString('body', ''); $db = JFactory::getDBO(); $custom = FSSCF::Comm_StoreFields($this->customfields); $custom = serialize($custom); $qry = "UPDATE {$this->table} SET name = '" . FSSJ3Helper::getEscaped($db, $this->post['name']) . "', email = '" . FSSJ3Helper::getEscaped($db, $this->post['email']) . "', "; $qry .= "website = '" . FSSJ3Helper::getEscaped($db, $this->post['website']) . "', body = '" . FSSJ3Helper::getEscaped($db, $this->post['body']) . "', "; $qry .= "custom = '" . FSSJ3Helper::getEscaped($db, $custom) . "' WHERE id = " . FSSJ3Helper::getEscaped($db, $this->post['commentid']); $db->SetQuery($qry); $db->Query(); $this->DoShowComment(); exit; }