Fixed issue #7974: Single quote in DB user password breaks installation

LimeSurvey · Sep 26, 2013 · 9f00d54 · 9f00d54
1 parent 81fa4b5
commit 9f00d54
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/application/controllers/InstallerController.php b/application/controllers/InstallerController.php
@@ -1040,8 +1040,8 @@ function _writeConfigFile()
                 $dbdata .="\t\t\t" . "'emulatePrepare' => true,"    . "\n";
 
             }
-            $dbdata .="\t\t\t" . "'username' => '$sDatabaseUser',"  . "\n"
-            ."\t\t\t" . "'password' => '$sDatabasePwd',"            . "\n"
+            $dbdata .="\t\t\t" . "'username' => '".addslashes($sDatabaseUser)."',"  . "\n"
+            ."\t\t\t" . "'password' => '".addslashes($sDatabasePwd)."',"            . "\n"
             ."\t\t\t" . "'charset' => 'utf8',"                      . "\n"
             ."\t\t\t" . "'tablePrefix' => '$sDatabasePrefix',"      . "\n";