Fix missing escape_string in LP title update

9 years ago · 4ec97d924f
parent b4f436f589
commit 4ec97d924f
1 changed files with 1 additions and 1 deletions
--- a/main/newscorm/learnpath.class.php
+++ b/main/newscorm/learnpath.class.php
@ -4531,7 +4531,7 @@ class learnpath
        if (empty($name)) {
            return false;
        }
-        $this->name = $name;
+        $this->name = Database::escape_string($name);
        $lp_table = Database :: get_course_table(TABLE_LP_MAIN);
        $lp_id = $this->get_id();
        $course_id = $this->course_info['real_id'];