From 14a65ae2d383750719bf8bc9c412373e92c2b3c9 Mon Sep 17 00:00:00 2001 From: Carsten Schmitz Date: Fri, 2 Nov 2012 17:08:58 +0100 Subject: [PATCH] Fixed issue #6825: Long free text field improper escape sequence for Microsoft SQL --- application/helpers/common_helper.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/application/helpers/common_helper.php b/application/helpers/common_helper.php index 64052273542..e07a3daab4e 100644 --- a/application/helpers/common_helper.php +++ b/application/helpers/common_helper.php @@ -3190,7 +3190,7 @@ function HTMLEscape($str) { */ function dbQuoteAll($value) { - return '\'' . addslashes($value) . '\''; + return Yii::app()->db->quoteValue($value); } // make a string safe to include in a JavaScript String parameter.