Index: trunk/kernel/include/custommetadata.php
===================================================================
diff -u -N -r2497 -r3526
--- trunk/kernel/include/custommetadata.php	(.../custommetadata.php)	(revision 2497)
+++ trunk/kernel/include/custommetadata.php	(.../custommetadata.php)	(revision 3526)
@@ -184,12 +184,12 @@
 			{
         if(is_numeric($DataId))
         {
-            $sql = "UPDATE ".$this->SourceTable." SET Value='".$value."' WHERE CustomFieldId='$FieldId' AND ResourceId='$ResId'";
+            $sql = "UPDATE ".$this->SourceTable." SET Value=".$this->adodbConnection->qstr($value)." WHERE CustomFieldId='$FieldId' AND ResourceId='$ResId'";
             $this->adodbConnection->Execute($sql);
         }
         else
         {
-              $sql = "INSERT INTO ".$this->SourceTable." (ResourceId,CustomFieldId,Value) VALUES ('".$ResId."','$FieldId','$value')";
+              $sql = "INSERT INTO ".$this->SourceTable." (ResourceId,CustomFieldId,Value) VALUES ('".$ResId."','$FieldId',".$this->adodbConnection->qstr($value).")";
               $this->adodbConnection->Execute($sql);
         	}
         }