When submitting data from a created webform that contains an apostrophe this error message shows up in the browser window. "user error: You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'vices'),"

The email gets sent, however, the data does not get stored in the webform_submited_data table.

for example "I'm requesting this... " causes the error.

Comments

ullgren’s picture

ullgren commented
Assigned: Unassigned » ullgren
Priority: Normal » Critical

I've now added calls to check_query before inserting data.
Also attaches patch for the previous 4.5 release, a patched version should published sometime tomorrow.

ullgren’s picture

ullgren commented

Closing this issue. Since it's now fixed and in the distribution.