From 80f4bc210c43bdd73e602cc717749b2f9972535f Mon Sep 17 00:00:00 2001
From: Jeremy Brown <jsb@jetcom.org>
Date: Fri, 13 Nov 2020 08:01:30 -0500
Subject: [PATCH] Escape names so that names with quotes in them work (aka,
 nicknames)

---
 application/libraries/Qrz.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/application/libraries/Qrz.php b/application/libraries/Qrz.php
index 0ab43b1cd..6019ac3d2 100755
--- a/application/libraries/Qrz.php
+++ b/application/libraries/Qrz.php
@@ -77,9 +77,9 @@ class Qrz {
             $data['callsign'] = (string)$xml->Callsign->call;
 
             if ($use_fullname === true) {
-                $data['name'] = (string)$xml->Callsign->fname . ' ' . (string)$xml->Callsign->name;
+                $data['name'] = addslashes((string)$xml->Callsign->fname) . ' ' . addslashes((string)$xml->Callsign->name);
             } else {
-                $data['name'] = (string)$xml->Callsign->fname;
+                $data['name'] = addslashes((string)$xml->Callsign->fname);
             }
             $data['gridsquare'] = (string)$xml->Callsign->grid;
             $data['city'] = (string)$xml->Callsign->addr2;