From: skodak Date: Fri, 29 Dec 2006 21:17:43 +0000 (+0000) Subject: MDL-7837 auth_ldap_bulk_insert() fails when user data contains single quotes - patch... X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=cf6bf1ab5f77cb92feff50f4dccfe1e70a22a3fb;p=moodle.git MDL-7837 auth_ldap_bulk_insert() fails when user data contains single quotes - patch by IƱaki Arenaza --- diff --git a/auth/ldap/lib.php b/auth/ldap/lib.php index 88947eda9b..3d1e72eecb 100644 --- a/auth/ldap/lib.php +++ b/auth/ldap/lib.php @@ -703,7 +703,7 @@ function auth_ldap_bulk_insert($users){ // bulk insert -- superfast with $bulk_insert_records $sql = 'INSERT INTO '.$CFG->prefix.'extuser (idnumber) VALUES '; // make those values safe - array_map('addslashes', $users); + $users = array_map('addslashes', $users); // join and quote the whole lot $sql = $sql . '(\'' . join('\'),(\'', $users) . '\')'; print "+ " . count($users) . " users\n";