Merge branch 'release/v1.4.10'

daylightstudio · Aug 25, 2020 · cfd32bc · cfd32bc
2 parents fa82c38 + c8d9381
commit cfd32bc
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/fuel/modules/fuel/config/fuel_constants.php b/fuel/modules/fuel/config/fuel_constants.php
@@ -1,6 +1,6 @@
 <?php 
 // INSTALL_ROOT is defined in the index.php bootstrap file
-define('FUEL_VERSION', '1.4.9');
+define('FUEL_VERSION', '1.4.10');
 if (!defined('MODULES_FOLDER'))
 {
 	define('MODULES_FOLDER', '../../fuel/modules');

diff --git a/fuel/modules/fuel/models/Base_module_model.php b/fuel/modules/fuel/models/Base_module_model.php
@@ -333,7 +333,7 @@ public function list_items($limit = NULL, $offset = 0, $col = 'id', $order = 'as
 			$this->db->select($this->table_name.'.*'); // make select table specific
 		}
 
-		if (!empty($col)) $this->db->order_by(str_replace(' ', '', $col), str_replace(' ', '', $order), FALSE);
+		if (!empty($col)) $this->db->order_by($this->db->escape($col), $this->db->escape($order), FALSE);
 		if (!empty($limit)) $this->db->limit((int) $limit);
 		$this->db->offset((int)$offset);