fix(targetticket,targetchange): escape single quotes

Signed-off-by: Thierry Bugier <tbugier@teclib.com>
pluginsGLPI · Feb 6, 2019 · 5d5f22b · 5d5f22b
1 parent 75338b7
commit 5d5f22b
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/inc/targetchange.class.php b/inc/targetchange.class.php
@@ -199,6 +199,11 @@ public static function import($targetitems_id = 0, $target_data = []) {
          }
       }
 
+      // escape text fields
+      foreach (['title', 'content'] as $key) {
+         $target_data[$key] = $DB->escape($target_data[$key]);
+      }
+
       // update target ticket
       $item->update($target_data);
 

diff --git a/inc/targetticket.class.php b/inc/targetticket.class.php
@@ -1548,7 +1548,7 @@ public static function import($targetitems_id = 0, $target_data = []) {
       }
 
       // escape text fields
-      foreach (['title'] as $key) {
+      foreach (['title', 'content'] as $key) {
          $target_data[$key] = $DB->escape($target_data[$key]);
       }