Index: modules/node/node.module =================================================================== RCS file: /cvs/drupal/drupal/modules/node/node.module,v retrieving revision 1.967 diff -u -p -r1.967 node.module --- modules/node/node.module 26 May 2008 17:12:55 -0000 1.967 +++ modules/node/node.module 4 Jul 2008 21:03:03 -0000 @@ -2100,8 +2100,8 @@ function node_access($op, $node, $accoun if (count($grants)) { $grants_sql = 'AND (' . implode(' OR ', $grants) . ')'; } - - $sql = "SELECT COUNT(*) FROM {node_access} WHERE (nid = 0 OR nid = %d) $grants_sql AND grant_$op >= 1"; + $grant_op = db_escape_table('grant_' . $op); + $sql = "SELECT COUNT(*) FROM {node_access} WHERE (nid = 0 OR nid = %d) $grants_sql AND $grant_op >= 1"; $result = db_query($sql, $node->nid); return (db_result($result)); }