From b4aa076a82f2465c1c6dc69f918274d4930f6510 Mon Sep 17 00:00:00 2001 From: Laurent Destailleur Date: Sun, 22 Jul 2012 21:50:08 +0200 Subject: [PATCH] Fix: escape for create command --- htdocs/core/db/mysql.class.php | 2 +- htdocs/core/db/mysqli.class.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/htdocs/core/db/mysql.class.php b/htdocs/core/db/mysql.class.php index e504edb8a11..a5194a6c217 100644 --- a/htdocs/core/db/mysql.class.php +++ b/htdocs/core/db/mysql.class.php @@ -808,7 +808,7 @@ class DoliDBMysql if (! $ret) { // We try again for compatibility with Mysql < 4.1.1 - $sql = 'CREATE DATABASE '.$database; + $sql = "CREATE DATABASE `".$this->escape($database)."`"; dol_syslog($sql,LOG_DEBUG); $ret=$this->query($sql); } diff --git a/htdocs/core/db/mysqli.class.php b/htdocs/core/db/mysqli.class.php index 438c4b83f19..6e8541d19bc 100644 --- a/htdocs/core/db/mysqli.class.php +++ b/htdocs/core/db/mysqli.class.php @@ -802,7 +802,7 @@ class DoliDBMysqli if (! $ret) { // We try again for compatibility with Mysql < 4.1.1 - $sql = 'CREATE DATABASE '.$database; + $sql = "CREATE DATABASE `".$this->escape($database)."`"; dol_syslog($sql,LOG_DEBUG); $ret=$this->query($sql); }