Escape group title and description in migration process - refs CT#7909

1.10.x
Yannick Warnier 10 years ago
parent 2776c37887
commit 0caae06a2d
  1. 2
      main/install/install.lib.php

@ -2350,6 +2350,8 @@ function fixIds(EntityManager $em)
if (!empty($groups )) {
foreach ($groups as $group) {
$group['description'] = Database::escape_string($group['description']);
$group['name'] = Database::escape_string($group['name']);
$sql = "INSERT INTO usergroup (name, group_type, description, picture, url, visibility, updated_at, created_at)
VALUES ('{$group['name']}', '1', '{$group['description']}', '{$group['picture_uri']}', '{$group['url']}', '{$group['visibility']}', '{$group['updated_on']}', '{$group['created_on']}')";

Loading…
Cancel
Save