From a10968cddc86add8cabcbc1302ccd32d3ff2a69d Mon Sep 17 00:00:00 2001 From: Laurent Destailleur Date: Fri, 7 Dec 2007 17:08:51 +0000 Subject: [PATCH] Ajout addslashe sur ajout libelle --- htdocs/product.class.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/htdocs/product.class.php b/htdocs/product.class.php index 0c00f3b0f69..eaa787261e5 100644 --- a/htdocs/product.class.php +++ b/htdocs/product.class.php @@ -206,7 +206,7 @@ class Product extends CommonObject $sql.= "fk_user_author, fk_product_type, price, price_ttc, price_base_type, canvas)"; $sql.= " VALUES (now(), "; if ($this->ref) $sql.= "'".$this->ref."', "; - if ($this->libelle) $sql.= "'".$this->libelle."', "; + if ($this->libelle) $sql.= "'".addslashes($this->libelle)."', "; $sql.= $user->id.","; $sql.= " ".$this->type.","; $sql.= ($price_ht?price2num($price_ht):"null").",";