Databse INSERT/UPDATE secured against db javscript injection

[fa-stable.git] / admin / db / maintenance_db.inc

diff --git a/admin/db/maintenance_db.inc b/admin/db/maintenance_db.inc
index 4907366693dd5ec65069b4bc1eb09245be0e4c1b..27d36f21d0d39dbc1560af82c19a20bd649a34c9 100644 (file)
--- a/admin/db/maintenance_db.inc
+++ b/admin/db/maintenance_db.inc
@@ -415,7 +415,7 @@ function db_export($conn, $filename, $zip='no', $comment='')
                                                if ($field_type[$k] != "" && $field_type[$k] != "NO" && $row2[$k] == "")
                                                        $out .= "NULL";
                                                else
-                                                       $out .= "'" . db_escape($row2[$k]) . "'";
+                                                       $out .= db_escape($row2[$k]);
                                                if ($k < ($nf - 1))
                                                        $out .= ", ";
                                        }