Index: trunk/kernel/include/parseditem.php =================================================================== diff -u -N -r725 -r738 --- trunk/kernel/include/parseditem.php (.../parseditem.php) (revision 725) +++ trunk/kernel/include/parseditem.php (.../parseditem.php) (revision 738) @@ -936,8 +936,8 @@ } if(!$found && $LoadFromDB==TRUE) { - $sql = "SELECT * FROM ".$this->SourceTable." WHERE $Field = '$Value'"; - //echo $sql; + $sql = 'SELECT * FROM '.$this->SourceTable.' WHERE '.$Field.' = "'.addslashes($Value).'"'; +// $sql = 'SELECT * FROM '.$this->SourceTable.' WHERE '.$Field.' = "'.($Value).'"'; $res = $this->adodbConnection->Execute($sql); if($res && !$res->EOF)