* Check account first, then add single quotes.

config/filter.php

@@ -35,6 +35,7 @@ $filter->default->cookie['maxImport']    = 'reg::any';
 $filter->default->cookie['za']           = 'reg::any';
 $filter->default->cookie['zp']           = 'reg::any';
 $filter->default->cookie['historyOrder'] = 'reg::word';
+$filter->default->cookie['vision']       = 'reg::word';
 
 $filter->index        = new stdclass();
 $filter->my           = new stdclass();

framework/base/router.class.php

@@ -812,9 +812,10 @@ class baseRouter
 
         $vision  = '';
         $sql     = new sql();
-        $account = $sql->quote($account);
         if($this->config->installed and validater::checkAccount($account))
         {
+            $account = $sql->quote($account);
+
             if(!empty($_COOKIE['vision']))
             {
                 $vision = $_COOKIE['vision'];