Browse Source

Storage API : added character escaping to passed value in the setter function.

jkbockstael 14 years ago
parent
commit
62ab92f291
1 changed files with 1 additions and 0 deletions
  1. 1 0
      main/newscorm/storageapi.php

+ 1 - 0
main/newscorm/storageapi.php

@@ -37,6 +37,7 @@ function storage_get($sv_user, $sv_course, $sv_sco, $sv_key) {
 }
 
 function storage_set($sv_user, $sv_course, $sv_sco, $sv_key, $sv_value) {
+	$sv_value = mysql_real_escape_string($sv_value);
 	$mainDB = Database::get_main_database();
 	$sql = "replace into $mainDB.stored_values
 		(user_id, sco_id, course_id, sv_key, sv_value)