Escape string quotes in query

Co-authored-by: Richard Fath <[email protected]>

Author: YatharthVyas

administrator/components/com_modules/src/Model/ModuleModel.php

@@ -1302,7 +1302,7 @@ public static function prepareWorkflowField(Form $form, $data)
 				[
 					$db->quoteName('default') . ' = 1',
 					$db->quoteName('published') . ' = 1',
-					$db->quoteName('extension') . ' = "com_modules.module"',
+					$db->quoteName('extension') . ' = ' . $db->quote('com_modules.module'),
 				]
 			);
 

administrator/components/com_modules/src/Model/ModulesModel.php

@@ -347,7 +347,7 @@ protected function getListQuery()
 		// Join over the workflows association
 		$query->select($db->quoteName('wa.stage_id', 'stage_id'))
 			->join('INNER', $db->quoteName('#__workflow_associations', 'wa'), $db->quoteName('wa.item_id') . ' = ' . $db->quoteName('a.id'))
-			->where($db->quoteName('wa.extension') . ' = "com_modules.module"');
+			->where($db->quoteName('wa.extension') . ' = ' . $db->quote('com_modules.module');
 
 		// Join over the workflows stage
 		$query->select(