Fix : extrafields were save without escape

2013-05-02 12:14:29 +02:00 · 2013-05-02 12:14:29 +02:00 · 80cf467c47
commit 80cf467c47
parent 09c53cbe40
1 changed files with 1 additions and 1 deletions
--- a/htdocs/core/class/commonobject.class.php
+++ b/htdocs/core/class/commonobject.class.php
@ -2165,7 +2165,7 @@ abstract class CommonObject
            	{
 	                if ($this->array_options[$key] != '')
 	                {
-	                    $sql.=",'".$this->array_options[$key]."'";
+	                    $sql.=",'".$this->db->escape($this->array_options[$key])."'";
 	                }
 	                else
 	                {