escape the insert on the report options

This commit is contained in:
james 2012-10-22 18:39:42 +00:00
parent 0497a21b40
commit 1c10dda679

View File

@ -333,7 +333,7 @@ function createDataTCPDF(x,y,w,h,align,valign,fontname,fontstyle,fontsize,value)
/* Do the options */
$x = 0;
foreach($report['option'] as $k=>$v) {
echo "\n\t('', LAST_INSERT_ID(), 'option', $x, '$k', '$v', 0, 0, 0, 0, 0, '', ''),";
echo "\n\t('', LAST_INSERT_ID(), 'option', $x, '$k', '".mysql_real_escape_string($v)."', 0, 0, 0, 0, 0, '', ''),";
$x++;
}
/* Do the fields */