diff options
| author | Andreas Fischer <bantu@phpbb.com> | 2013-03-05 03:43:51 +0100 |
|---|---|---|
| committer | Andreas Fischer <bantu@phpbb.com> | 2013-03-05 22:59:57 +0100 |
| commit | af02681960257a1df344275b2a1eb2893bc470df (patch) | |
| tree | e65988cfde64ca2071189de04f1420d56d2f06df | |
| parent | 95764c4f0e6b1ceef7b14e2394637891482ade43 (diff) | |
| download | forums-af02681960257a1df344275b2a1eb2893bc470df.tar forums-af02681960257a1df344275b2a1eb2893bc470df.tar.gz forums-af02681960257a1df344275b2a1eb2893bc470df.tar.bz2 forums-af02681960257a1df344275b2a1eb2893bc470df.tar.xz forums-af02681960257a1df344275b2a1eb2893bc470df.zip | |
[ticket/10202] SQL escape the table name.
PHPBB3-10202
| -rw-r--r-- | phpBB/includes/config/db_text.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/phpBB/includes/config/db_text.php b/phpBB/includes/config/db_text.php index 0c18675ffc..7563a228f5 100644 --- a/phpBB/includes/config/db_text.php +++ b/phpBB/includes/config/db_text.php @@ -43,7 +43,7 @@ class phpbb_config_db_text public function __construct(phpbb_db_driver $db, $table) { $this->db = $db; - $this->table = $table; + $this->table = $this->db->sql_escape($table); } /** |