When XML <group> has a new course which is in a new category<orgunit> where the text contains a single quote the insert_record() fails because the addslashes_object() has not been applied and category ($course->category) ends up be set to 0 (zero). It ($course->category) should be set to 1;

Effects:
Under postgres, the newly created course ended up becoming our sitepage.
Under mysql, sitepage stays same, is ok.
Under both can't find the course in a category as category 0 is hidden.

Attached: Is sample XML for test

I will post patch soon.