Changes in SQL injection check of database library.

Author: Till Brehm

interface/lib/classes/db_mysql.inc.php

@@ -135,7 +135,7 @@ private function securityScan($string) {
 				$string_orig = $string;
 
 				//echo $string;
-				$chars = array(';', '#', '/*', '*/', '--', ' UNION ', '\\\'', '\\"');
+				$chars = array(';', '#', '/*', '*/', '--', '\\\'', '\\"');
 
 				$string = str_replace('\\\\', '', $string);
 				$string = preg_replace('/(^|[^\\\])([\'"])\\2/is', '$1', $string);