- Use addcslashes() instead of str_replace() for string quoting

git-svn-id: https://svn.roundcube.net/trunk@4558 208e9e7b-5314-0410-a742-e7e81cd9613c

1 files changed, 1 insertions, 3 deletions

diff --git a/plugins/managesieve/lib/rcube_sieve_script.php b/plugins/managesieve/lib/rcube_sieve_script.php
index 6aa4f5542..084540b60 100644
--- a/plugins/managesieve/lib/rcube_sieve_script.php
+++ b/plugins/managesieve/lib/rcube_sieve_script.php
@@ -554,9 +554,7 @@ class rcube_sieve_script
         }
         // quoted-string
         else {
-            $replace = array('\\' => '\\\\', '"' => '\\"');
-            $str = str_replace(array_keys($replace), array_values($replace), $str);
-            return '"' . $str . '"';
+            return '"' . addcslashes($str, '\\"') . '"';
         }
     }