diff --git a/htdocs/resource/class/dolresource.class.php b/htdocs/resource/class/dolresource.class.php index 4cb115ef378..1b9a0290c53 100644 --- a/htdocs/resource/class/dolresource.class.php +++ b/htdocs/resource/class/dolresource.class.php @@ -849,7 +849,7 @@ class Dolresource extends CommonObject $sql.= ' FROM '.MAIN_DB_PREFIX.'element_resources'; $sql.= " WHERE element_id=".$element_id." AND element_type='".$this->db->escape($element)."'"; if($resource_type) - $sql.=" AND resource_type LIKE '%".$resource_type."%'"; + $sql.=" AND resource_type LIKE '%".$this->db->escape($resource_type)."%'"; $sql .= ' ORDER BY resource_type'; dol_syslog(get_class($this)."::getElementResources", LOG_DEBUG);