Bug in ps_product when using product types

[Oliver Griffiths]

Hi,

Im not sure if this has been fixed in the latest version of 1.1, but I noticed a bug in ps_product.

Line: 670.

If the user enters an apostraphie eg: don't in a field in the product type info, and it doesnt get converted to its html counterpart by the wysiwyg, then theres an sql error when saving the data as it isnt escaped.

Code Select Expand

$value="'($value'";

should be

Code Select Expand

$value="'".addslashes($value)."'";

Hope this helps

Oli