Fix(Core): escape data when check if already exist (#457)

Author: stonebuzz

CHANGELOG.md

@@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
 ### Fixed
 
 - Use `global`  configuration for injection links
+- Escape  data when check if already exist
 
 ## [2.14.1] - 2024-12-27
 

inc/commoninjectionlib.class.php

@@ -1932,7 +1932,7 @@ private function dataAlreadyInDB($injectionClass, $itemtype)
                                     $where .= " AND `id` IN (SELECT `users_id` FROM glpi_useremails WHERE `email` = '$email') ";
                                 } else {
                                     $where .= " AND `" . $field . "`='" .
-                                    $this->getValueByItemtypeAndName($itemtype, $field) . "'";
+                                    Sanitizer::dbEscape((string) $this->getValueByItemtypeAndName($itemtype, $field)) . "'";
                                 }
                             }
                         }