patrickpollet/moodlews — Issue #3: Escaping DB field's value
Author: edouard-gillet
Created: 2012-03-01 19:54:46+00:00
State: open

Hello Patrick,

I noticed that in the SOAP webservice for Moodle 1.8, the value inserted in the DB are not escaped. Having a ' in the value will create an error during the DB operation.

I think the escaping should be done in the webservice, prior to the DB calls.

I can change the source code to escape the values, and give it to you.

Thank you,

--
Edouard Gillet