#131 Single Quote in Circulation Name Does Not Save

V.2.11.2
open
nobody
5
2009-09-01
2009-09-01
No

If a single quote is in a new circulation name, the SQL Insert fails.

To reproduce:
- New Circulation
- Type into "Circulation Name" field: John Smith's Computer
- Click button: Complete

Error message is:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 's Computer', '4', 0, '3', 0, 0)' at line 1- INSERT INTO cf_circulationform values (null, '1', 'John Smith's Computer', '4', 0, '3', 0, 0)

Suggested fix:

- in the text fields, replace all single quotes (') with two single quotes ('') to have the SQL statement passed properly to the database.

Discussion

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:





No, thanks