MDL-9288 : An additional addslashes() that was in Petr's patch but didn't get committ...

diff --git a/auth/mnet/auth.php b/auth/mnet/auth.php
index c01e46ab672502cd29ea544320c984a80cb99faf..2215443cf9838066293c61211f53161046d8159a 100644 (file)
--- a/auth/mnet/auth.php
+++ b/auth/mnet/auth.php
@@ -285,7 +285,7 @@ class auth_plugin_mnet extends auth_plugin_base {
         $firsttime = false;
 
         // get the local record for the remote user
-        $localuser = get_record('user', 'username', $remoteuser->username, 'mnethostid', $remotehost->id);
+        $localuser = get_record('user', 'username', addslashes($remoteuser->username), 'mnethostid', $remotehost->id);
 
         // add the remote user to the database if necessary, and if allowed
         // TODO: refactor into a separate function