@@ -283,6 +283,7 @@ function get_total_folder_size($path, $can_see_invisible = false)
'props.session_id'
);
+ $path = Database::escape_string($path);
$visibility_rule = ' props.visibility '.($can_see_invisible ? '<> 2' : '= 1');
$sql = "SELECT SUM(table1.size) FROM (