diff --git a/lib/classes/User/Query.php b/lib/classes/User/Query.php index ad10d3c752..940ed9deaf 100644 --- a/lib/classes/User/Query.php +++ b/lib/classes/User/Query.php @@ -323,7 +323,7 @@ class User_Query implements User_QueryInterface } if ($this->last_model) { - $sql .= ' AND usr.lastModel = "' . mysql_real_escape_string($this->last_model) . '" '; + $sql .= ' AND usr.lastModel = ' . $this->app['phraseanet.appbox']->get_connection()->quote($this->last_model) . ' '; } $sql_like = array();