diff options
Diffstat (limited to 'engine')
| -rw-r--r-- | engine/lib/relationships.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/engine/lib/relationships.php b/engine/lib/relationships.php index bdd5aadde..d84e70bfb 100644 --- a/engine/lib/relationships.php +++ b/engine/lib/relationships.php @@ -558,7 +558,7 @@ function elgg_get_entity_relationship_where_sql($table, $relationship = NULL, $r } if ($relationship) { - $wheres[] = "r.relationship = '$relationship'"; + $wheres[] = "r.relationship = '" . sanitise_string($relationship) . "'"; } if ($relationship_guid) { |