mirror of
https://github.com/frappe/erpnext.git
synced 2026-05-19 13:09:17 +00:00
[fix] escape quote in Accounts Receivable
This commit is contained in:
@@ -149,7 +149,7 @@ class AccountsReceivableReport(object):
|
|||||||
if not account_map:
|
if not account_map:
|
||||||
frappe.throw(_("No Customer Accounts found."))
|
frappe.throw(_("No Customer Accounts found."))
|
||||||
else:
|
else:
|
||||||
accounts_list = ['"{0}"'.format(ac.replace('"', '\"')) for ac in account_map]
|
accounts_list = ["'{0}'".format(frappe.db.escape(ac)) for ac in account_map]
|
||||||
conditions.append("account in ({0})".format(", ".join(accounts_list)))
|
conditions.append("account in ({0})".format(", ".join(accounts_list)))
|
||||||
|
|
||||||
return " and ".join(conditions), values
|
return " and ".join(conditions), values
|
||||||
|
|||||||
Reference in New Issue
Block a user