fixed sql quoting SC#145

2005-10-29 21:52:01 +00:00
parent 3fca3da072
commit f0a73113d5
1 changed files with 1 additions and 1 deletions
@@ -271,7 +271,7 @@
                    $status = execute_sql("INSERT INTO {$CFG->prefix}backup_files
                                               (backup_code, file_type, path, old_id)
                                           VALUES
-                                               ('$backup_unique_code','user','$dir','$userid')",false);
+                                               ('$backup_unique_code','user','".addslashes($dir)."','$userid')",false);
                }
                //Do some output
                backup_flush(30);