escape z VALUES

SE/se-lib/Core/Database/Mysql.php

@@ -1280,7 +1280,7 @@ class Core_Database_Mysql extends Core_Database {
 									$sql="insert ignore into `".$TABLE."` values ( ";
 									$vals="";
 									foreach($ROW as $FIELD=>$VAL) {
-										if(!$vals) $vals.="'".$VAL."'" ; else $vals.=" , '".$VAL."' ";
+										if(!$vals) $vals.="'".mysql_real_escape_string($VAL)."'" ; else $vals.=" , '".mysql_real_escape_string($VAL)."' ";
 									}
 									$sql.=$vals." ) ;";
 										 $this->query($sql) or die1('\nProblem z '.$sql);