Merge 1.1.x into master

[quix0rs-gnu-social.git] / classes / Profile.php

diff --git a/classes/Profile.php b/classes/Profile.php
index 7005e776a59da542c91ee18fff2d8ff5e0e1ae71..8a5be5f358b58916662310e25e341cb702d8e183 100644 (file)
--- a/classes/Profile.php
+++ b/classes/Profile.php
@@ -686,7 +686,7 @@ class Profile extends Managed_DataObject
         $profile = new Profile();
         $tagged = array();
 
-        $cnt = $profile->query(sprintf($qry, $this->id, $this->id, $tag));
+        $cnt = $profile->query(sprintf($qry, $this->id, $this->id, $profile->escape($tag)));
 
         while ($profile->fetch()) {
             $tagged[] = clone($profile);