--- mugshot/mugshot.module	2007-04-04 00:04:52.000000000 +0200
+++ mugshot2/mugshot.module	2007-04-16 14:08:08.000000000 +0200
@@ -116,7 +116,7 @@
 
 function mugshot_submit($form_id, &$form_values) {
 	if (variable_get("mugshot_enable_on_comment", 0)&&_mugshot_on_comment_capability()) {
-		$result = db_query('SELECT m.mid, m.path FROM {mugshot} m WHERE m.mid = %d AND m.sid = "%s" AND m.preview = 1', $form_values["mugshot_mid"], session_id());
+		$result = db_query("SELECT m.mid, m.path FROM {mugshot} m WHERE m.mid = %d AND m.sid = '%s' AND m.preview = 1", $form_values["mugshot_mid"], session_id());
 		$mugshot = db_fetch_object($result);
 		if (($mugshot->mid == $form_values["mugshot_mid"])&&(is_numeric($mugshot->mid))) {
 			db_query('UPDATE {mugshot} SET preview = 0, visible = '.variable_get('mugshot_default_visibility', 0).' WHERE mid = %d', $form_values["mugshot_mid"]);
@@ -544,7 +544,9 @@
 					$visible = 0;
 					$preview = 1;
 				}
-				db_query('INSERT INTO {mugshot} (mid, path, hostname, sid, uid, visible, preview, timestamp, camera_model, user_name) VALUES (%d ,"%s", "%s", "%s", %d, %d, %d, %d, "%s", "%s")', $mid, $mugshot_file, $_SERVER['REMOTE_ADDR'], session_id(), $user->uid, $visible, $preview, time(), $camera, $username);
+				db_query("INSERT INTO {mugshot} (mid, path, hostname, sid, uid, visible, preview, timestamp, camera_model, 
+user_name) VALUES (%d ,'%s', '%s', '%s', %d, %d, %d, %d, '%s', '%s')", $mid, $mugshot_file, $_SERVER['REMOTE_ADDR'], session_id(), $user->uid, 
+$visible, $preview, time(), $camera, $username);
 				imagejpeg($image,$mugshot_file,"90");
 				watchdog('mugshot',t('Add mugshot'),WATCHDOG_NOTICE,l(t('See'),'mugshot/'.$mid));
 				$result = "OK";
@@ -620,4 +622,4 @@
 	}
 	return $content;
 }
-?>
\ No newline at end of file
+?>