From f0a73113d501ce8dd3f68f452cc19ee96c6e652a Mon Sep 17 00:00:00 2001
From: skodak <skodak>
Date: Sat, 29 Oct 2005 21:52:01 +0000
Subject: [PATCH] fixed sql quoting SC#145

---
 backup/backuplib.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backup/backuplib.php b/backup/backuplib.php
index d188c45a8d2..c0ca9ca3e22 100644
--- a/backup/backuplib.php
+++ b/backup/backuplib.php
@@ -271,7 +271,7 @@
                     $status = execute_sql("INSERT INTO {$CFG->prefix}backup_files
                                                (backup_code, file_type, path, old_id)
                                            VALUES
-                                               ('$backup_unique_code','user','$dir','$userid')",false);
+                                               ('$backup_unique_code','user','".addslashes($dir)."','$userid')",false);
                 }
                 //Do some output
                 backup_flush(30);