Escape {$this->sort_column} in get_position()

1 files changed, 2 insertions, 2 deletions

diff --git a/modules/gallery/models/item.php b/modules/gallery/models/item.php
index 7dce9e51..07c305d8 100644
--- a/modules/gallery/models/item.php
+++ b/modules/gallery/models/item.php
@@ -381,9 +381,9 @@ class Item_Model extends ORM_MPTT {
     $result = Database::instance()->query("
       SELECT COUNT(*) AS position FROM {items}
        WHERE parent_id = {$this->id}
-         AND {$this->sort_column} <= (SELECT {$this->sort_column}
+         AND `{$this->sort_column}` <= (SELECT `{$this->sort_column}`
                                         FROM {items} WHERE id = $child_id)
-       ORDER BY {$this->sort_column} {$this->sort_order}");
+       ORDER BY `{$this->sort_column}` {$this->sort_order}");
 
     return $result->current()->position;
   }