security bugfix

SVN Revision: 718
2007-02-02 10:58:40 +00:00
parent fcc4adcde5
commit 85a7a306ff
1 changed files with 2 additions and 1 deletions
@@ -821,12 +821,13 @@ record_to_string(#roster{us = {User, _Server},
 	       in	   -> "I";
 	       none	   -> "N"
 	   end,
+    SAskMessage = ejabberd_odbc:escape(AskMessage),
    ["'", Username, "',"
     "'", SJID, "',"
     "'", Nick, "',"
     "'", SSubscription, "',"
     "'", SAsk, "',"
-     "'", AskMessage, "',"
+     "'", SAskMessage, "',"
     "'N', '', 'item'"].

 groups_to_string(#roster{us = {User, _Server},