diff --git a/htdocs/fichinter/fichinter.class.php b/htdocs/fichinter/fichinter.class.php index dc269aefc1f..1317ef67930 100644 --- a/htdocs/fichinter/fichinter.class.php +++ b/htdocs/fichinter/fichinter.class.php @@ -123,7 +123,7 @@ class Fichinter */ $sql = "UPDATE ".MAIN_DB_PREFIX."fichinter SET "; $sql .= " datei = $this->date"; - $sql .= ", note = '$this->note'"; + $sql .= ", note = '".mysql_real_escape_string($this->note)."'"; $sql .= ", duree = $this->duree"; $sql .= ", fk_projet = $this->projet_id"; $sql .= " WHERE rowid = $id";