This is caused by not changing ' to \' when select existing keyword. We will fix it in next release. You can fix it yourself by editing file kernel/classes/datatypes/ezkeyword/ezkeyword.php around line 161:
Change
$existingWords =& $db->arrayQuery( "SELECT * FROM ezkeyword WHERE keyword IN ( '$wordsString' ) AND class_id='$classID' " );
to
$wordsString = $db->escapeString( $wordsString );
$existingWords =& $db->arrayQuery( "SELECT * FROM ezkeyword WHERE keyword IN ( '$wordsString' ) AND class_id='$classID' " );
Regards, wenyue
You must be logged in to post messages in this topic!
