r68558 fixes: add some escaping (just in case, not really needed), as well as import...

diff --git a/includes/db/DatabaseMysql.php b/includes/db/DatabaseMysql.php
index a23b7d2..139c0b5 100644 (file)
--- a/includes/db/DatabaseMysql.php
+++ b/includes/db/DatabaseMysql.php
@@ -114,8 +114,10 @@ class DatabaseMysql extends DatabaseBase {
                                        $this->query( 'SET NAMES utf8', __METHOD__ );
                                }
                                // Set SQL mode, default is turning them all off, can be overridden or skipped with null
-                               if (is_string($wgSQLMode)) {
-                                       $this->query( "SET sql_mode = '$wgSQLMode'", __METHOD__ );
+                               global $wgSQLMode;
+                               if ( is_string( $wgSQLMode ) ) {
+                                       $mode = $this->addQuotes( $wgSQLMode );
+                                       $this->query( "SET sql_mode = $mode", __METHOD__ );
                                }
                        }