Browse Source

Adding Database::escape_string

Julio Montoya 10 years ago
parent
commit
86ab6cf386
1 changed files with 2 additions and 0 deletions
  1. 2 0
      main/inc/lib/course.lib.php

+ 2 - 0
main/inc/lib/course.lib.php

@@ -3936,6 +3936,8 @@ class CourseManager
     {
     {
         $t_cfv = Database::get_main_table(TABLE_MAIN_COURSE_FIELD_VALUES);
         $t_cfv = Database::get_main_table(TABLE_MAIN_COURSE_FIELD_VALUES);
         $table_field = Database::get_main_table(TABLE_MAIN_COURSE_FIELD);
         $table_field = Database::get_main_table(TABLE_MAIN_COURSE_FIELD);
+        $original_course_id_name = Database::escape_string($original_course_id_name);
+        $original_course_id_name = Database::escape_string($original_course_id_name);
         $sql = "SELECT course_code FROM $table_field cf
         $sql = "SELECT course_code FROM $table_field cf
                 INNER JOIN $t_cfv cfv ON cfv.field_id=cf.id
                 INNER JOIN $t_cfv cfv ON cfv.field_id=cf.id
                 WHERE
                 WHERE