Ticket #2797: replace addslashes() with explicit escape calls on the DB objects

1 files changed, 1 insertions, 1 deletions

diff --git a/classes/Queue_item.php b/classes/Queue_item.php
index c7e17be6e..007d4ed23 100644
--- a/classes/Queue_item.php
+++ b/classes/Queue_item.php
@@ -32,7 +32,7 @@ class Queue_item extends Memcached_DataObject
         if ($transports) {
             if (is_array($transports)) {
                 // @fixme use safer escaping
-                $list = implode("','", array_map('addslashes', $transports));
+                $list = implode("','", array_map(array($qi, 'escape'), $transports));
                 $qi->whereAdd("transport in ('$list')");
             } else {
                 $qi->transport = $transports;