Fixed issue: [security] Issue in CSV user export

LimeSurvey · Mar 23, 2023 · 9531225 · 9531225 · Shnoulle · Mar 27, 2023
1 parent a273bd7
commit 9531225
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/application/controllers/UserManagementController.php b/application/controllers/UserManagementController.php
@@ -808,11 +808,11 @@ public function actionExportUser(string $outputFormat, int $uid = 0)
                 fprintf($fp, chr(0xEF) . chr(0xBB) . chr(0xBF));
                 $header = array('uid', 'users_name', 'full_name', 'email', 'lang', 'password');
                 //Add csv header
-                fputcsv($fp, $header, ';');
+                fputcsv($fp, $header, ';', '"');
 
                 //add csv row datas
                 foreach ($aUsers as $fields) {
-                    fputcsv($fp, $fields, ';');
+                    fputcsv($fp, $fields, ';', '"');
                 }
                 fclose($fp);
                 header('Content-Encoding: UTF-8');