From 57d0592a9acc2fd26f30ba11a9496ddc0b75e86f Mon Sep 17 00:00:00 2001
From: OpenXE <>
Date: Mon, 9 Jan 2023 11:16:39 +0100
Subject: [PATCH] Bugfix ticket mail citation

---
 www/pages/ticket.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/www/pages/ticket.php b/www/pages/ticket.php
index fb5c7b32..bd653b2c 100644
--- a/www/pages/ticket.php
+++ b/www/pages/ticket.php
@@ -726,7 +726,7 @@ class Ticket {
                 $citation_info =$recv_messages[0]['zeit']." ".$recv_messages[0]['verfasser']." &lt;".$recv_messages[0]['mail']."&gt;";
                 $text = $drafted_messages[0]['text'].$nl.$nl.$citation_info.":".$nl."<blockquote type=\"cite\">".$recv_messages[0]['text']."</blockquote>";
 
-                $sql = "UPDATE ticket_nachricht SET text='".$text."' WHERE id=".$drafted_messages[0]['id'];
+                $sql = "UPDATE ticket_nachricht SET text='".$this->app->DB->real_escape_string($text)."' WHERE id=".$drafted_messages[0]['id'];
                 $this->app->DB->Update($sql);  
                 header("Location: index.php?module=ticket&action=edit&id=$id");
                 $this->app->ExitXentral();