Index: branches/unlabeled/unlabeled-1.105.2/admin/install.php
===================================================================
diff -u -r4904 -r5332
--- branches/unlabeled/unlabeled-1.105.2/admin/install.php	(.../install.php)	(revision 4904)
+++ branches/unlabeled/unlabeled-1.105.2/admin/install.php	(.../install.php)	(revision 5332)
@@ -1356,7 +1356,9 @@
   else
   {
   	  $pass = md5($pass);
-      $sql = "UPDATE ".$g_TablePrefix."ConfigurationValues SET VariableValue = '$pass' WHERE VariableName='RootPass' OR VariableName='RootPassVerify'";
+      $sql = '	UPDATE '.$g_TablePrefix.'ConfigurationValues
+      			SET VariableValue = '.$ado->qstr($pass).'
+      			WHERE VariableName = "RootPass";';
       $ado =& inst_GetADODBConnection();
       $ado->Execute($sql);
       $state="modselect";