diff --git a/workflow/engine/classes/class.wsTools.php b/workflow/engine/classes/class.wsTools.php index 478172cd9..d7ee43a30 100755 --- a/workflow/engine/classes/class.wsTools.php +++ b/workflow/engine/classes/class.wsTools.php @@ -1096,7 +1096,7 @@ class workspaceTools $command = 'mysql' . ' --host=' . $parameters['dbHost'] . ' --user=' . $parameters['dbUser'] - . ' --password=' . $parameters['dbPass'] + . ' --password=' . str_replace('"', '\"', str_replace("'", "\'", quotemeta($parameters['dbPass'])))//no change! supports the type passwords: .\+*?[^]($)'"\"' . ' --database=' . mysql_real_escape_string($database) . ' --default_character_set utf8' . ' --execute="SOURCE '.$filename.'"';