diff --git a/install.php b/install.php
index b74d661..db944c3 100644
--- a/install.php
+++ b/install.php
@@ -593,8 +593,9 @@ PHP;
echo "
Creating '$template/_config.php'...";
flush();
- $devServers = $this->var_export_array_nokeys(explode("\n", $_POST['devsites']));
-
+ $devServers = $this->var_export_array_nokeys(explode("\n", $_POST['devsites']));
+
+ $escapedPassword = addslashes($config['mysql']['password']);
$this->createFile("$template/_config.php", << "$config[database]",
"server" => "{$config['mysql']['server']}",
"username" => "{$config['mysql']['username']}",
- "password" => "{$config['mysql']['password']}",
+ "password" => "{$escapedPassword}",
"database" => "{$config['mysql']['database']}",
);