#13264 fixed injection "

2024-04-23 17:15:30 +02:00 · 2024-04-23 17:15:30 +02:00 · d41e3d44a9
parent 6d33c36cb0
commit d41e3d44a9
1 changed files with 1 additions and 1 deletions
--- a/pandora_console/include/functions_events.php
+++ b/pandora_console/include/functions_events.php
@ -1193,7 +1193,7 @@ function events_get_all(
                    ($key === 0) ? '' : $nexo,
                    $field,
                    $not_search,
-                    str_replace('"', '', io_safe_output($filter['search'])),
+                    preg_replace('/(?<!\\\\)"/', '', io_safe_output($filter['search'])),
                );
                $sql_search .= ' ';
            }