aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--phpBB/includes/functions_user.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/phpBB/includes/functions_user.php b/phpBB/includes/functions_user.php
index 2eafbf4b8a..cee09bef7c 100644
--- a/phpBB/includes/functions_user.php
+++ b/phpBB/includes/functions_user.php
@@ -2783,7 +2783,7 @@ function remove_default_avatar($group_id, $user_ids)
user_avatar_width = 0,
user_avatar_height = 0
WHERE group_id = ' . (int)$group_id . '
- AND user_avatar = \'' . $row['group_avatar'] . '\'
+ AND user_avatar = \'' . $db->sql_escape($row['group_avatar']) . '\'
AND ' . $db->sql_in_set('user_id', $user_ids);
$db->sql_query($sql);