From d41e3d44a94002c4ebf9094df0a625f2bb384d11 Mon Sep 17 00:00:00 2001
From: Daniel Cebrian <daniel.cebrian@pandorafms.com>
Date: Tue, 23 Apr 2024 17:15:30 +0200
Subject: [PATCH] #13264 fixed injection "

---
 pandora_console/include/functions_events.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pandora_console/include/functions_events.php b/pandora_console/include/functions_events.php
index 54fdbec4bf..9d45334828 100644
--- a/pandora_console/include/functions_events.php
+++ b/pandora_console/include/functions_events.php
@@ -1193,7 +1193,7 @@ function events_get_all(
                     ($key === 0) ? '' : $nexo,
                     $field,
                     $not_search,
-                    str_replace('"', '', io_safe_output($filter['search'])),
+                    preg_replace('/(?<!\\\\)"/', '', io_safe_output($filter['search'])),
                 );
                 $sql_search .= ' ';
             }