From 71446caebefe08d4615c5ae89f622230b323b5ac Mon Sep 17 00:00:00 2001
From: uckelman <uckelman@nomic.net>
Date: Sun, 9 May 2010 22:02:26 +0000
Subject: Apparently sql_quote() doesn't wrap value in quotes.

git-svn-id: https://vassalengine.svn.sourceforge.net/svnroot/vassalengine/site-src/trunk@6842 67b53d14-2c14-4ace-a08f-0dab2b34000c
---
 src/PhpBB3.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'src/PhpBB3.php')

diff --git a/src/PhpBB3.php b/src/PhpBB3.php
index 72700ce..24fe25c 100644
--- a/src/PhpBB3.php
+++ b/src/PhpBB3.php
@@ -265,9 +265,9 @@ class PhpBB3 {
            ') VALUES (' .
              $userId . ', ' .
              '1, ' .
-             $db->sql_escape($realFilename) . ', ' .
-             $db->sql_escape($comment) . ', ' .
-             $db->sql_escape($mimetype) . ', ' .
+             '"' . $db->sql_escape($realFilename) . '", ' .
+             '"' . $db->sql_escape($comment) . '", ' .
+             '"' . $db->sql_escape($mimetype) . '", ' .
              strlen($data) . ', ' .
              time() .
            ')';
-- 
cgit v1.2.3