From dcef77ddae15ddb6ee95e2aed3672cb3fe2b41e4 Mon Sep 17 00:00:00 2001 From: Julio Montoya Date: Thu, 21 Nov 2019 14:14:19 +0100 Subject: [PATCH] Fix lp shortcut published option see BT#16238 Replace domesticate with database escape --- main/lp/learnpathList.class.php | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/main/lp/learnpathList.class.php b/main/lp/learnpathList.class.php index b3d96a0746..1deb2f03c8 100755 --- a/main/lp/learnpathList.class.php +++ b/main/lp/learnpathList.class.php @@ -106,10 +106,7 @@ class LearnpathList $isAllowToEdit = api_is_allowed_to_edit(); /** @var CLp $row */ foreach ($learningPaths as $row) { - // Use domesticate here instead of Database::escape_string because - // it prevents ' to be slashed and the input (done by learnpath.class.php::toggle_visibility()) - // is done using domesticate() - $name = domesticate($row->getName()); + $name = Database::escape_string($row->getName()); $link = 'lp/lp_controller.php?action=view&lp_id='.$row->getId().'&id_session='.$session_id; $oldLink = 'newscorm/lp_controller.php?action=view&lp_id='.$row->getId().'&id_session='.$session_id;