Adding Database::escape_string

10 years ago · 86ab6cf386
parent d9ed7eb692
commit 86ab6cf386
1 changed files with 2 additions and 0 deletions
--- a/main/inc/lib/course.lib.php
+++ b/main/inc/lib/course.lib.php
@ -3936,6 +3936,8 @@ class CourseManager
    {
        $t_cfv = Database::get_main_table(TABLE_MAIN_COURSE_FIELD_VALUES);
        $table_field = Database::get_main_table(TABLE_MAIN_COURSE_FIELD);
+        $original_course_id_name = Database::escape_string($original_course_id_name);
+        $original_course_id_name = Database::escape_string($original_course_id_name);
        $sql = "SELECT course_code FROM $table_field cf
                INNER JOIN $t_cfv cfv ON cfv.field_id=cf.id
                WHERE