escape other stuff

2016-06-16 06:09:59 -06:00
parent deff98612f
commit f00a5271c3
1 changed files with 4 additions and 1 deletions
--- a/src/Umbraco.Web/Install/InstallSteps/DatabaseConfigureStep.cs
+++ b/src/Umbraco.Web/Install/InstallSteps/DatabaseConfigureStep.cs
@@ -61,8 +61,11 @@ namespace Umbraco.Web.Install.InstallSteps
            }
            else
            {
+                var password = string.Format("'{0}'", database.Password);
+                password = password.Replace("&", "&amp;").Replace(">", "&gt;").Replace("<", "&lt;").Replace("\"", "&quot;").Replace("'", "''");
+
                dbContext.ConfigureDatabaseConnection(
-                    database.Server, database.DatabaseName, database.Login, string.Format("'{0}'", database.Password),
+                    database.Server, database.DatabaseName, database.Login, password,
                    database.DatabaseType.ToString());
            }
        }