Merged from MOODLE_15_STABLE: Escape strings for database. SC # 145

This commit is contained in:
mjollnir_ 2005-08-26 05:29:34 +00:00
parent 300dfca610
commit d23d0398fe

View File

@ -315,7 +315,7 @@
$status = execute_sql("INSERT INTO {$CFG->prefix}backup_files
(backup_code, file_type, path)
VALUES
('$backup_unique_code','course','$dir')",false);
('$backup_unique_code','course','".addslashes($dir)."')",false);
}
//Do some output
backup_flush(30);