MDL-11053 Course object not escaped before insert - patch by Aaron C Spike; backported from HEAD

2007-08-29 13:54:09 +00:00
parent a34487e2e5
commit e0a8a35867
1 changed files with 1 additions and 1 deletions
@@ -542,7 +542,7 @@ function process_group_tag($tagcontents){
                }else{
                    $course->sortorder = 1000;
                }
-                if($course->id = insert_record('course', $course)){
+                if($course->id = insert_record('course', addslashes_object($course))){

                    // Setup the blocks
                    $page = page_create_object(PAGE_COURSE_VIEW, $course->id);