diff --git a/lib/Geocode.php b/lib/Geocode.php index bd0f5b62..d96aaac2 100644 --- a/lib/Geocode.php +++ b/lib/Geocode.php @@ -1061,7 +1061,7 @@ class Geocode continue; } - $sToken = chksql($this->oDB->getOne("SELECT make_standard_name('".$aSpecialTerm[1]."') AS string")); + $sToken = chksql($this->oDB->getOne("SELECT make_standard_name('".pg_escape_string($aSpecialTerm[1])."') AS string")); $sSQL = 'SELECT * '; $sSQL .= 'FROM ( '; $sSQL .= ' SELECT word_id, word_token, word, class, type, country_code, operator';