Tracker: Bugs
5
Trap event with quote not INSERTed in database - ID: 1672311
Last Update: Tracker Item Submitted ( fabrices )
trapd.pl, version: 4.1.8
A trap whose event text contains a quote (') character
is not inserted in the database.
In trapd.pl, line 487: the INSERT SQL command will
fail because the quote is not escaped in the event
field.
The solution is to add the line:
$event =~ s/\'/\\\'/g; ## replace ' with \'
before the creation of the INSERT command string.
Nobody/Anonymous
None
None
Public
