Index: trunk/kernel/include/usersession.php
===================================================================
diff -u -r2299 -r2308
--- trunk/kernel/include/usersession.php	(.../usersession.php)	(revision 2299)
+++ trunk/kernel/include/usersession.php	(.../usersession.php)	(revision 2308)
@@ -568,17 +568,11 @@
 
 		//if(!(int)$FrontEnd==1)
 		//{
+		$db =& $this->adodbConnection;
 		$sessionkey = $this->GetSessionKey();
-		$sql = "SELECT * FROM ".GetTablePrefix()."SessionData WHERE VariableName='$variableName' AND SessionKey='$sessionkey'";
-		$rs = $this->adodbConnection->Execute($sql);
-		if($rs && !$rs->EOF)
-		{
-			$sql = "UPDATE ".GetTablePrefix()."SessionData SET VariableValue='$variableValue' WHERE VariableName='$variableName' AND SessionKey='$sessionkey'";
-		}
-		else
-		$sql = "INSERT INTO ".GetTablePrefix()."SessionData (VariableName,VariableValue,SessionKey) VALUES ('$variableName','$variableValue','$sessionkey')";
-
-		$this->adodbConnection->Execute($sql);
+		$sql = 'REPLACE INTO '.GetTablePrefix().'SessionData (SessionKey,VariableName,VariableValue) VALUES (%s,%s,%s)';
+		$db->Execute( sprintf($sql, $db->qstr($sessionkey), $db->qstr($variableName), $db->qstr($variableValue) ) );
+		
 		//			echo "<BR>UPDATE: $sql<BR>";
 		//}
 	}