fixing bug caused by not escaping double quetes

GEANT · Nov 27, 2024 · ae95889 · ae95889
1 parent 3fb738b
commit ae95889
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/web/admin/duplicate_profile_result.php b/web/admin/duplicate_profile_result.php
@@ -36,14 +36,17 @@
 $auth = new \web\lib\admin\Authentication();
 $auth->authenticate();
 
+
 function copyRow($row, $feldsArray, $table, $dbHandle) {
     $fieldsList = implode(',', array_keys($row));
     foreach ($row as $key => $value) {
         if ($feldsArray[$key] == 's') {
             if ($value === null) {
                 $row[$key] = 'NULL';
             } else {
-                $row[$key] = '"'.$value.'"';
+                $e1 = str_replace('\\', '\\\\', $value);
+                $e2 = str_replace('"', '\"', $e1);
+                $row[$key] = '"'.$e2.'"';
             }
         }
     }