Unable to select user, that has ' in it's username

[Alexander Obuhovich]

In-Portal uses formatter classes to transform database values into human readable form and back.

Class kLEFTFormatter in particular is used along with user selectors to convert username selected into ID and back. I've recently discovered, that it doesn't escape value from the form before checking it's presence in database resulting sql error, when username has ' in it.

Task: http://tracker.in-portal.org/view.php?id=1014

Ready for testing.

--
Best Regards,

http://www.in-portal.com
http://www.alex-time.com

[Phil]

good catch, allready reported here
http://groups.google.com/group/in-portal-bugs/browse_thread/thread/10ecfa8eec614ca/da7c131dfe5b1d1e

and seems related also to
https://groups.google.com/forum/#!topic/in-portal-dev/_zXDBTcrRiw

>  left_formatter_sql_error_when_field_contains_single_quote.patch
> 1KAfficherTélécharger

[Alexander Obuhovich]

Thanks. You are right about that one. I've set proper relation between mentioned discussion and my task in issue tracker.

--
You received this message because you are subscribed to the Google Groups "In-Portal Bugs Team" group.
To post to this group, send email to in-port...@googlegroups.com.
To unsubscribe from this group, send email to in-portal-bug...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/in-portal-bugs?hl=en.

[Phil -- wbtc.fr --]

thanks, I forgot to do it !

2011/3/13 Alexander Obuhovich <aik....@gmail.com>

[Dmitry A.]

A good one!

Cheers!

DA