From fd1bcc2415e903cbd55e7a87d2e09fc23fbc1fe1 Mon Sep 17 00:00:00 2001 From: Kartik Kathuria Date: Mon, 12 Aug 2019 14:07:52 +0530 Subject: [PATCH] Fix #15202 - escaped correctly password Fixes: #15202 Signed-off-by: Kartik Kathuria --- libraries/classes/Server/Privileges.php | 1 + 1 file changed, 1 insertion(+) diff --git a/libraries/classes/Server/Privileges.php b/libraries/classes/Server/Privileges.php index 637ecba799..1785f282ea 100644 --- a/libraries/classes/Server/Privileges.php +++ b/libraries/classes/Server/Privileges.php @@ -5130,6 +5130,7 @@ class Privileges */ public static function getHashedPassword($password) { + $password = $GLOBALS['dbi']->escapeString($password); $result = $GLOBALS['dbi']->fetchSingleRow( "SELECT PASSWORD('" . $password . "') AS `password`;" );