Merge branch '3.6' of git@github.com:Dolibarr/dolibarr.git into 3.6

Dolibarr · Jun 8, 2015 · ca44070 · ca44070
2 parents d0a1d2c + 3c8d54d
commit ca44070
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/htdocs/fourn/class/fournisseur.commande.class.php b/htdocs/fourn/class/fournisseur.commande.class.php
@@ -911,8 +911,8 @@ function create($user, $notrigger=0)
         $sql.= " VALUES (";
         $sql.= "''";
         $sql.= ", '".$this->ref_supplier."'";
-        $sql.= ", '".$this->note_private."'";
-        $sql.= ", '".$this->note_public."'";
+        $sql.= ", '".$this->db->escape($this->note_private)."'";
+        $sql.= ", '".$this->db->escape($this->note_public)."'";
         $sql.= ", ".$conf->entity;
         $sql.= ", ".$this->socid;
         $sql.= ", '".$this->db->idate($now)."'";