Still fixing it.

diff --git a/classes/glmMemberImportFromConnections.php b/classes/glmMemberImportFromConnections.php
index a25feaf..5a361b0 100644 (file)
--- a/classes/glmMemberImportFromConnections.php
+++ b/classes/glmMemberImportFromConnections.php
@@ -170,7 +170,7 @@ class GlmMemberImportFromConnections
                 )
             VALUES
                 (
-                '$memberTypeName',
+                '".addslashes($memberTypeName)."',
                 ''
                 )
         ;";
@@ -195,7 +195,7 @@ class GlmMemberImportFromConnections
                 )
             VALUES
                 (
-                '$memberTypeName',
+                '".addslashes($memberTypeName)."',
                 '',
                 ''
                 )
@@ -268,8 +268,8 @@ class GlmMemberImportFromConnections
                     )
                 VALUES
                     (
-                    '".$c['name']."',
-                    '".$c['descr']."',
+                    '".addslashes($c['name'])."',
+                    '".addslashes($c['descr'])."',
                     '',
                     0
                     )
@@ -342,7 +342,7 @@ class GlmMemberImportFromConnections
                         ".$this->config['memb_access_numb']['Moderated'].",
                         $membTypeID,
                         '".$m['ts']."',
-                        '".$m['organization']."'
+                        '".addslashes($m['organization'])."'
                         )
                 ;";
                 $this->wpdb->query($sql);
@@ -451,16 +451,16 @@ class GlmMemberImportFromConnections
                     VALUES
                         (
                         $membID,
-                        '".$m['organization']."',
+                        '".addslashes($m['organization'])."',
                         ".($m['status'] == 'approved' ?
                                 $this->config['status_numb']['Active'] :
                                 $this->config['status_numb']['Inactive']
                         ).",
                         'Imported from Connections Business Listing',
-                        '".$m['bio']."',
+                        '".addslashes($m['bio'])."',
                         '',
-                        '".$addr['line_1']."',
-                        '".$addr['line_2']."',
+                        '".addslashes($addr['line_1'])."',
+                        '".addslashes($addr['line_2'])."',
                         $cityID,
                         '".$addr['state']."',
                         '".$addr['country']."',