MDL-7837 auth_ldap_bulk_insert() fails when user data contains single quotes - patch...

diff --git a/auth/ldap/lib.php b/auth/ldap/lib.php
index 88947eda9b8b43f4c419aff774065ce6c6958d1a..3d1e72eecb0a56d1bd3a3d5708ef6ec133091b02 100644 (file)
--- a/auth/ldap/lib.php
+++ b/auth/ldap/lib.php
@@ -703,7 +703,7 @@ function auth_ldap_bulk_insert($users){
     // bulk insert -- superfast with $bulk_insert_records
     $sql = 'INSERT INTO '.$CFG->prefix.'extuser (idnumber) VALUES ';
     // make those values safe
-    array_map('addslashes', $users);
+    $users = array_map('addslashes', $users);
     // join and quote the whole lot
     $sql = $sql . '(\'' . join('\'),(\'', $users) . '\')';
     print "+ " . count($users) . " users\n";