--- ./store/store.module	2004-10-29 05:09:01.000000000 +0200
+++ ../ecommerce-new/./store/store.module	2004-11-23 20:14:26.000000000 +0100
@@ -523,7 +523,7 @@ function store_transaction_save($edit) {
 
     foreach ($edit as $key => $value) {
       if (in_array($key, $transaction_fields)) {
-        $fields[] = check_query($key);
+        $fields[] = db_escape_string($key);
         $values[] = $value;
         $s[] = "'%s'";
       }
@@ -856,12 +856,12 @@ function store_query() {
       if (strpos($v, ',') !== false) {
         $operator = ',';
         $data     = explode(',', $v);
-        $data = array_map('check_query', $data);
+        $data = array_map('db_escape_string', $data);
       }
       elseif (strpos($v, '-') !== false) {
         $operator = '-';
         $data     = explode('-', $v);
-        $data = array_map('check_query', $data);
+        $data = array_map('db_escape_string', $data);
       }
       else {
         /* This order is important */
@@ -872,14 +872,14 @@ function store_query() {
           if (strlen($v) >= $n && substr($v, 0, $n) == $o) {
             $operator = '<>';
             $data['op']    = $o;
-            $data[0] = check_query(trim(substr($v, $n)));
+            $data[0] = db_escape_string(trim(substr($v, $n)));
             break;
           }
         }
       }
 
       if ($operator == null) {
-        $data[] = check_query($v);
+        $data[] = db_escape_string($v);
       }
 
       $select[] = "*";
--- ./address/address.module	2004-10-22 21:52:19.000000000 +0200
+++ ../ecommerce-new/./address/address.module	2004-11-23 20:14:26.000000000 +0100
@@ -200,7 +200,7 @@ function address_save($edit) {
   if ($aid) {
     foreach ($edit as $key => $value) {
       if (in_array($key, $fields)) {
-        $q[] = check_query($key) ." = '%s'";
+        $q[] = db_escape_string($key) ." = '%s'";
         $v[] = $value;
       }
     }
@@ -209,7 +209,7 @@ function address_save($edit) {
   else {
     foreach ($edit as $key => $value) {
       if (in_array($key, $fields)) {
-        $k[] = check_query($key);
+        $k[] = db_escape_string($key);
         $v[] = $value;
         $s[] = "'%s'";
       }