SQL Fatal when using Double-quotes in Text Filters in Grids

Components

Labels

Description

SQL Fatal when using Double-quotes in Text Filters in Grids.

Example - filter"

  1. Applies to all text filters including main search one

  2. single-quote (') works fine.

SQL Fatal

SELECT Category.* ,(REPLACE(ParentPath, CONCAT('|', Category.CategoryId, '|'), '')) AS `CurrentSort`,(img.SameImages) AS `SameImages`,(img.LocalThumb) AS `LocalThumb`,(img.ThumbPath) AS `ThumbPath`,(img.ThumbUrl) AS `ThumbUrl`,(img.LocalImage) AS `LocalImage`,(img.LocalPath) AS `LocalPath`,(img.Url) AS `FullUrl`,(IF(ThemeId != 0, 1, 0)) AS `CreatedBySystem`,(cust.l1_cust_7) AS `cust_l_ItemTemplate`,(cust.l1_cust_8) AS `cust_RssExpireInterval`,(cust.l1_cust_9) AS `cust_RssUpdateInterval`,(cust.l1_cust_10) AS `cust_RssLastUpdated`,(cust.l1_cust_11) AS `cust_RssDeleteExpired`,(cust.l1_cust_13) AS `cust_RssUpdateIntervalType`,(cust.l1_cust_14) AS `cust_RssSource`,(cust.l1_cust_15) AS `cust_RssExpireIntervalType`,(cust.l1_cust_16) AS `cust_RssDefaultExpiration`,(cust.l1_cust_17) AS `cust_RssDefaultExpirationType`,(cust.l1_cust_18) AS `cust_RssLastExpired`,(cust.l1_cust_20) AS `cust_n_ItemTemplate`,(cust.l1_cust_21) AS `cust_bb_ItemTemplate`,(cust.l1_cust_24) AS `cust_p_ItemTemplate`,(Category.CreatedOn) AS `CreatedOn_date`,(Category.CreatedOn) AS `CreatedOn_time`,(Category.Modified) AS `Modified_date`,(Category.Modified) AS `Modified_time`,( IF(Category.NewItem = 2, IF(Category.CreatedOn >= (UNIX_TIMESTAMP() - 8*3600*24), 1, 0), Category.NewItem )) AS `IsNew`
FROM Category
LEFT JOIN Images img ON img.ResourceId = Category.ResourceId AND img.DefaultImg = 1
LEFT JOIN PermCache ON PermCache.CategoryId = Category.CategoryId
LEFT JOIN CategoryCustomData cust ON Category.ResourceId = cust.ResourceId
WHERE ((Category.Status <> 4) AND (Category.ThemeId = 4 OR Category.ThemeId = 0) AND (ParentId = 1) AND (PermId = 1)) AND (((`Category`.`l1_Name` LIKE "%tret
"%")))
ORDER BY `Category`.`Priority` desc,`Category`.`l1_Name` asc
LIMIT 0,21

Context Information

None

Additional information (do not use)

None

Attachments

1

Activity

Dmitry Andrejev 
January 12, 2010 at 4:05 AM

Closing completed tasks.

Alex 
November 10, 2009 at 11:16 AM

Test. Already commited.

Alex 
November 10, 2009 at 11:16 AM

Fix committed to [b]5.0.x branch/b. Commit Message:

Fixes #0000412: SQL Fatal when using Double-quotes in Text Filters in Grids

Alex 
November 10, 2009 at 11:16 AM

Done.

Fixed

Details

Priority

Assignee

Reporter

External issue ID

External issue URL

Fix versions

Affects versions

Patch Instructions

Patches must be submitted through Phabricator.

Created October 28, 2009 at 6:44 AM
Updated December 29, 2024 at 9:23 PM
Resolved January 12, 2010 at 4:05 AM