Bugfix: added mysql_escape_string to answer text when copying question.

git-svn-id: file:///Users/Shitiz/Downloads/lssvn/trunk/unstable@912 b72ed6b6-b9f8-46b5-92b4-906544132732
LimeSurvey · Feb 20, 2004 · adb6034 · adb6034
1 parent 62b3f10
commit adb6034
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/admin/database.php b/admin/database.php
@@ -239,7 +239,10 @@
 		$r1 = mysql_query($q1);
 		while ($qr1 = mysql_fetch_array($r1))
 			{
-			$i1 = "INSERT INTO {$dbprefix}answers (qid, code, answer, `default_value`, sortorder) VALUES ('$newqid', '{$qr1['code']}', '{$qr1['answer']}', '{$qr1['default_value']}', '{$qr1['sortorder']}')";
+			$i1 = "INSERT INTO {$dbprefix}answers (qid, code, answer, `default_value`, sortorder) "
+				. "VALUES ('$newqid', '{$qr1['code']}', "
+				. "'".mysql_escape_string($qr1['answer'])."', '{$qr1['default_value']}', "
+				. "'{$qr1['sortorder']}')";
 			$ir1 = mysql_query($i1);
 			}		
 		}