From 73dab8023decb13e24ddf3bc2608a5c2acb14eab Mon Sep 17 00:00:00 2001
From: Dany De Bontridder <dany@alchimerys.be>
Date: Tue, 8 Mar 2016 20:10:30 +0100
Subject: [PATCH] Bug : description was forgotten when restoring a template.
 Make the query safer

---
 include/restore.inc.php | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/include/restore.inc.php b/include/restore.inc.php
index 8619827b9..deb80e468 100644
--- a/include/restore.inc.php
+++ b/include/restore.inc.php
@@ -150,16 +150,16 @@ if ( isset ($_REQUEST['sa'] ))
         $id=$cn->get_next_seq('s_modid');
 
         if ( strlen(trim($_REQUEST['database'])) == 0 )
-            $lname=$id." Restauration :".sql_string($_FILES['file']['name']);
+            $lname=$id." Restauration :".$_FILES['file']['name'];
         else
             $lname=$id." ".$_REQUEST['database'];
-
-
-        $sql="insert into modeledef (mod_id,mod_name,mod_desc) values (".$id.",'Restauration".$lname."','".$ldesc."') ";
+        
+        $ldesc=HtmlInput::default_value_post("desc", "");
+        $sql="insert into modeledef (mod_id,mod_name,mod_desc) values ($1,$2,$3)";
         $cn->start();
         try
         {
-            $cn->get_value($sql);
+            $cn->exec_sql($sql,array($id,$lname,$ldesc));
 
         }
         catch ( Exception $e)