Bad SQL query and apostrophes in names

Dane Powell - February 10, 2009 - 17:11
Project:Bibliography Module
Version:6.x-1.0-rc3
Component:Code
Category:bug report
Priority:normal
Assigned:Unassigned
Status:closed
Description

We have an author with the last name O'Malley who appears multiple times in our database. When I go to the biblio/authors to merge the multiple entries, other entries for "O'Malley" don't appear on each individual entry. The reason is that the query on line 1110 of biblio.admin.inc uses the unescaped author last name, resulting in the following SQL error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'Malley', name) AND cid!=83' at line 1 query: SELECT * FROM biblio_contributor_data cd WHERE LOCATE('O'Malley', name) AND cid!=83 in /var/www/live/sites/all/modules/biblio/biblio.admin.inc on line 1110.

#1

rjerome - February 10, 2009 - 17:47
Status:active» fixed

Thanks,

It's fixed and will appear in RC4 later today.

#2

System Message - February 24, 2009 - 17:50
Status:fixed» closed

Automatically closed -- issue fixed for 2 weeks with no activity.

 
 

Drupal is a registered trademark of Dries Buytaert.