diff options
| -rw-r--r-- | engine/lib/entities.php | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/engine/lib/entities.php b/engine/lib/entities.php index 95807aab5..813759c8b 100644 --- a/engine/lib/entities.php +++ b/engine/lib/entities.php @@ -3546,6 +3546,7 @@ function get_entities_from_private_setting_multi(array $name, $type = "", $subty $i = 1; foreach ($name as $k => $n) { $k = sanitise_string($k); + $n = sanitise_string($n); $s_join .= " JOIN {$CONFIG->dbprefix}private_settings s$i ON e.guid=s$i.entity_guid"; $where[] = "s$i.name = '$k'"; $where[] = "s$i.value = '$n'"; |