Fixed issue: Proper quoting of values when creating a database backup

LimeSurvey · Jan 26, 2014 · 31e4444 · 31e4444
1 parent 390642a
commit 31e4444
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/application/helpers/admin/backupdb_helper.php b/application/helpers/admin/backupdb_helper.php
@@ -164,9 +164,9 @@ function _outputRecords($sTableName, $aFieldNames, $aRecords)
             {
 
                 if (isset($aRecord[$sFieldName]) && !is_null($aRecord[$sFieldName])) {
-                    $sValue= addslashes($aRecord[$sFieldName]);
+                    $sValue= addcslashes($aRecord[$sFieldName],"'");
                     $sValue = preg_replace("#\n#", "\\n", $sValue);
-                    $sOutput.= '"' . $sValue . '"';
+                    $sOutput.= "'" . $sValue . "'";
                 }
                 else
                 {