[security] string escaping in LTree converter (Q.Schuler)

chanmix51 · Jan 8, 2014 · 1fc3fef · 1fc3fef
1 parent 5d0f223
commit 1fc3fef
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Pomm/Converter/PgLTree.php b/Pomm/Converter/PgLTree.php
@@ -28,6 +28,6 @@ public function fromPg($data, $type = null)
      */
     public function toPg($data, $type = null)
     {
-        return sprintf("'%s'::ltree", join('.', $data));
+        return sprintf("'%s'::ltree", \pg_escape_string(join('.', $data)));
     }
 }