baculum: Tweak escape config file values

diff --git a/gui/baculum/protected/Class/Miscellaneous.php b/gui/baculum/protected/Class/Miscellaneous.php
index 957e85b9983079cae7dbb982e1fae50a02d77c54..c7b95ba79272acba8b04a50a7e113d090007bdac 100644 (file)
--- a/gui/baculum/protected/Class/Miscellaneous.php
+++ b/gui/baculum/protected/Class/Miscellaneous.php
@@ -171,10 +171,12 @@ class Miscellaneous extends TModule {
                        $tmp .= "[$section]\n";
                                foreach($values as $key => $val){
                                        if(is_array($val)){
-                                               foreach($val as $k =>$v){
+                                               foreach($val as $k => $v) {
+                                                       $v = $this->escapeINIVal($v);
                                                        $tmp .= "{$key}[$k] = \"$v\"\n";
                                                }
                                        } else {
+                                               $val = $this->escapeINIVal($val);
                                                $tmp .= "$key = \"$val\"\n";
                                        }
                                }
@@ -187,6 +189,18 @@ class Miscellaneous extends TModule {
                return $result;
        }
 
+       /**
+        * Escape text written to INI-style file.
+        *
+        * @access private
+        * @param string $value text to escape
+        * @return string escaped text
+        */
+       private function escapeINIVal($value) {
+               $esc_value = str_replace('"', '\"', $value);
+               return $esc_value;
+       }
+
        /**
         * Parse INI-style configuration file.
         *