From f00a5271c35830f3370ccad10da4ef693bdd8651 Mon Sep 17 00:00:00 2001
From: Blake Clerke-Smith <bkclerke@gmail.com>
Date: Thu, 16 Jun 2016 06:09:59 -0600
Subject: [PATCH] escape other stuff

---
 .../Install/InstallSteps/DatabaseConfigureStep.cs            | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/Umbraco.Web/Install/InstallSteps/DatabaseConfigureStep.cs b/src/Umbraco.Web/Install/InstallSteps/DatabaseConfigureStep.cs
index b7530ef980..fbd0b5025c 100644
--- a/src/Umbraco.Web/Install/InstallSteps/DatabaseConfigureStep.cs
+++ b/src/Umbraco.Web/Install/InstallSteps/DatabaseConfigureStep.cs
@@ -61,8 +61,11 @@ namespace Umbraco.Web.Install.InstallSteps
             }
             else
             {
+                var password = string.Format("'{0}'", database.Password);
+                password = password.Replace("&", "&amp;").Replace(">", "&gt;").Replace("<", "&lt;").Replace("\"", "&quot;").Replace("'", "''");
+
                 dbContext.ConfigureDatabaseConnection(
-                    database.Server, database.DatabaseName, database.Login, string.Format("'{0}'", database.Password),
+                    database.Server, database.DatabaseName, database.Login, password,
                     database.DatabaseType.ToString());
             }
         }