fix(section): escape questions to duplciate

Signed-off-by: Thierry Bugier <tbugier@teclib.com>
pluginsGLPI · Mar 5, 2019 · 9786afa · 9786afa
1 parent fb30d55
commit 9786afa
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/inc/section.class.php b/inc/section.class.php
@@ -193,6 +193,12 @@ public function duplicate() {
                $row['uuid']);
          $row['plugin_formcreator_sections_id'] = $newSection_id;
          $row['_skip_checks'] = true;
+
+         // escape text fields
+         foreach (['name', 'description'] as $key) {
+            $row[$key] = $DB->escape($row[$key]);
+         }
+
          if (!$new_questions_id = $section_question->add($row)) {
             return false;
          }