From af02681960257a1df344275b2a1eb2893bc470df Mon Sep 17 00:00:00 2001
From: Andreas Fischer <bantu@phpbb.com>
Date: Tue, 5 Mar 2013 03:43:51 +0100
Subject: [PATCH] [ticket/10202] SQL escape the table name.

PHPBB3-10202
---
 phpBB/includes/config/db_text.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/phpBB/includes/config/db_text.php b/phpBB/includes/config/db_text.php
index 0c18675ffc..7563a228f5 100644
--- a/phpBB/includes/config/db_text.php
+++ b/phpBB/includes/config/db_text.php
@@ -43,7 +43,7 @@ class phpbb_config_db_text
 	public function __construct(phpbb_db_driver $db, $table)
 	{
 		$this->db = $db;
-		$this->table = $table;
+		$this->table = $this->db->sql_escape($table);
 	}
 
 	/**