Index: trunk/admin/import/import_funcs.php =================================================================== diff -u -r618 -r1152 --- trunk/admin/import/import_funcs.php (.../import_funcs.php) (revision 618) +++ trunk/admin/import/import_funcs.php (.../import_funcs.php) (revision 1152) @@ -166,7 +166,7 @@ { global $dst_db; $sql_template = "REPLACE INTO ".GetTablePrefix()."PersistantSessionData (PortalUserId, VariableName, VariableValue) VALUES (%s,'%s','%s')"; - $dst_db->Execute( sprintf($sql_template, $user_id, $var_name, $var_value) ); + $dst_db->Execute( sprintf($sql_template, $user_id, $var_name, addslashes($var_value) ) ); } function DecodeIP($ip)