From 1eecef7ab93e1ec2148a90283969ef6f6c2544da Mon Sep 17 00:00:00 2001
From: Jamie Cameron <jcameron@webmin.com>
Date: Sun, 4 Aug 2019 15:09:28 -0700
Subject: [PATCH] MySQL vars like tmpdir need quoting

---
 mysql/save_vars.cgi | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mysql/save_vars.cgi b/mysql/save_vars.cgi
index bdfd04b94..cb2ff5c19 100755
--- a/mysql/save_vars.cgi
+++ b/mysql/save_vars.cgi
@@ -12,7 +12,7 @@ if ($in{'save'} || !@d) {
 	foreach $v (keys %in) {
 		if ($v =~ /^value_(\S+)$/) {
 			&execute_sql_logged($master_db,
-					    "set global $1 = $in{$v}");
+					    "set global $1 = '$in{$v}'");
 			$first ||= $1;
 			$count++;
 			}