Escape group title and description in migration process - refs CT#7909

chamilo · Oct 21, 2015 · 0caae06 · 0caae06
1 parent 2776c37
commit 0caae06
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/main/install/install.lib.php b/main/install/install.lib.php
@@ -2350,6 +2350,8 @@ function fixIds(EntityManager $em)
 
     if (!empty($groups )) {
         foreach ($groups as $group) {
+            $group['description'] = Database::escape_string($group['description']);
+            $group['name'] = Database::escape_string($group['name']);
             $sql = "INSERT INTO usergroup (name, group_type, description, picture, url, visibility, updated_at, created_at)
                     VALUES ('{$group['name']}', '1', '{$group['description']}', '{$group['picture_uri']}', '{$group['url']}', '{$group['visibility']}', '{$group['updated_on']}', '{$group['created_on']}')";