From 4929f94c2040b02175c9b028e8b72a602b1a2776 Mon Sep 17 00:00:00 2001 From: Denis Flaven Date: Fri, 18 Mar 2011 11:22:23 +0000 Subject: [PATCH] Protect the output of the config file against values containing quotes. SVN:trunk[1133] --- core/config.class.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/config.class.inc.php b/core/config.class.inc.php index 4c1162156..eeb1ebcf0 100644 --- a/core/config.class.inc.php +++ b/core/config.class.inc.php @@ -1016,7 +1016,7 @@ class Config $sSeenAs = $aSettingInfo['value'] ? '1' : '0'; break; default: - $sSeenAs = "'".$aSettingInfo['value']."'"; + $sSeenAs = "'".addslashes($aSettingInfo['value'])."'"; } fwrite($hFile, "\t'$sPropCode' => $sSeenAs,\n"); }