From f035daedcaac3cc5e063f6c3486f9da644a1b115 Mon Sep 17 00:00:00 2001
From: skodak <skodak>
Date: Thu, 29 Mar 2007 22:07:41 +0000
Subject: [PATCH] MDL-4313 LDAP doesn't properly escape extra quotes in course
 details; backported from MOODLE_18_STABLE

---
 enrol/ldap/enrol.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/enrol/ldap/enrol.php b/enrol/ldap/enrol.php
index db39b28b09f..121b9cc8df8 100755
--- a/enrol/ldap/enrol.php
+++ b/enrol/ldap/enrol.php
@@ -585,8 +585,8 @@ function create_course ($course_ext,$skip_fix_course_sortorder=0){
 
     // override with required ext data
     $course->idnumber  = $course_ext[$CFG->enrol_ldap_course_idnumber][0];
-    $course->fullname  = $course_ext[$CFG->enrol_ldap_course_fullname][0];
-    $course->shortname = $course_ext[$CFG->enrol_ldap_course_shortname][0];
+    $course->fullname  = addslashes($course_ext[$CFG->enrol_ldap_course_fullname][0]);
+    $course->shortname = addslashes($course_ext[$CFG->enrol_ldap_course_shortname][0]);
     if (   empty($course->idnumber)
         || empty($course->fullname)
         || empty($course->shortname) ) { 
@@ -597,7 +597,7 @@ function create_course ($course_ext,$skip_fix_course_sortorder=0){
     }
 
     if(!empty($CFG->enrol_ldap_course_summary)){ // optional
-        $course->summary   = $course_ext[$CFG->enrol_ldap_course_summary][0];
+        $course->summary   = addslashes($course_ext[$CFG->enrol_ldap_course_summary][0]);
     }
     if(!empty($CFG->enrol_ldap_category)){ // optional ... but ensure it is set!
         $course->category   = $CFG->enrol_ldap_category;