--- filestore2.module-cvs	2006-03-21 13:20:37.000000000 +0100
+++ filestore2.module	2006-03-21 13:25:05.000000000 +0100
@@ -155,7 +155,7 @@ function filestore2_insert($node) {
   foreach ($node as $k => $v) {
     if (in_array($k, $fields)) {
       $keys[] = db_escape_string($k);
-      $value[] = $v;
+      $value[] = db_escape_string($v);
     }
   }
 
@@ -168,7 +168,7 @@ function filestore2_update($node) {
   $fields = array("fid", "nid", "fsid", "version", "author", "url");
   foreach ($node as $k => $v) {
     if (in_array($k, $fields)) {
-      $q[] = db_escape_string($k) ." = '$v'";
+      $q[] = db_escape_string($k) ." = '". db_escape_string($v) ."'";
     }
   }