Merge pull request #1335 from bkclerke/U4-7879

escape semicolons
2016-06-16 14:11:32 +02:00
parent 85b00f60ab f00a5271c3
commit 2a5dcef5f9
1 changed files with 4 additions and 1 deletions
--- a/src/Umbraco.Web/Install/InstallSteps/DatabaseConfigureStep.cs
+++ b/src/Umbraco.Web/Install/InstallSteps/DatabaseConfigureStep.cs
@@ -61,8 +61,11 @@ namespace Umbraco.Web.Install.InstallSteps
            }
            else
            {
+                var password = string.Format("'{0}'", database.Password);
+                password = password.Replace("&", "&amp;").Replace(">", "&gt;").Replace("<", "&lt;").Replace("\"", "&quot;").Replace("'", "''");
+
                dbContext.ConfigureDatabaseConnection(
-                    database.Server, database.DatabaseName, database.Login, database.Password,
+                    database.Server, database.DatabaseName, database.Login, password,
                    database.DatabaseType.ToString());
            }
        }