Browse Source

Fixed incorrect escaping when using backslashes

Tobias Reich 8 years ago
parent
commit
6db83d45e2
1 changed files with 4 additions and 0 deletions
  1. 4 0
      php/Modules/Database.php

+ 4 - 0
php/Modules/Database.php

@@ -356,6 +356,10 @@ final class Database {
 
 			}
 
+			// Put a backslash in front of every character that is part of the regular
+			// expression syntax. Avoids a backreference when using preg_replace.
+			$value = preg_quote($value);
+
 			// Replace
 			$query = preg_replace('/\?/', $value, $query, 1);