--- filefield_paths.module  2009-04-09 12:10:48.000000000 +0800
+++ filefield_paths.module      2009-04-07 08:13:32.000000000 +0800
@@ -620,7 +620,7 @@
     return FALSE;
   }
 
-  db_query("UPDATE {files} SET filename = '%s', filepath = '%s' WHERE fid = %d", $file['filename']['new'], $file['field']['filepath'], $file['field']['fid']);
+  db_query('UPDATE {files} SET filename = "%s", filepath = "%s" WHERE fid = %d', $file['filename']['new'], $file['field']['filepath'], $file['field']['fid']);
 
   return TRUE;
 }