BUGFIX: escaped filename before querying with it - #ajoneil

git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/branches/2.3@72190 467b73ca-7a2a-4603-9d3b-597d59a354a9
silverstripe-scienceninjas · Feb 2, 2011 · a2ffe58 · a2ffe58
1 parent 027cf02
commit a2ffe58
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/forms/HtmlEditorField.php b/forms/HtmlEditorField.php
@@ -54,6 +54,8 @@ function Field() {
 				} else if($link[0] == '/') {
 					$broken = true;
 				} else if(ereg('^assets/',$link)) {
+					$link = str_replace(array('%20', '%5C', '%27'), array(' ', '\\', '\''), $link);
+					$link = Convert::raw2sql($link);
 					if(!DataObject::get_one("File", "Filename = '$link'", false)) {
 						$broken = true;
 					}