From 79619daf93a2b464e01f9beb4a4e19b4444988b5 Mon Sep 17 00:00:00 2001 From: stronk7 Date: Sun, 4 Jan 2004 22:58:28 +0000 Subject: [PATCH] Added addslashes() to check for existing users, because some characters can break the query (old users containing ', for example). --- backup/restorelib.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backup/restorelib.php b/backup/restorelib.php index f2cb989a4b..0c1ac79bbe 100644 --- a/backup/restorelib.php +++ b/backup/restorelib.php @@ -513,7 +513,7 @@ $newid=null; //check if it exists (by username) and get its id $user_exists = true; - $user_data = get_record("user","username",$user->username); + $user_data = get_record("user","username",addslashes($user->username)); if (!$user_data) { $user_exists = false; } else { -- 2.39.5