diff --git a/adm/shop_admin/itemcopyupdate.php b/adm/shop_admin/itemcopyupdate.php index 1e6a6d51f..05bfef1de 100644 --- a/adm/shop_admin/itemcopyupdate.php +++ b/adm/shop_admin/itemcopyupdate.php @@ -69,7 +69,7 @@ if($cp['it_explan']) { } } - $sql = " update {$g5['g5_shop_item_table']} set it_explan = '{$cp['it_explan']}' where it_id = '$new_it_id' "; + $sql = " update {$g5['g5_shop_item_table']} set it_explan = '".addslashes($cp['it_explan'])."' where it_id = '$new_it_id' "; sql_query($sql); }