mirror of
https://github.com/frappe/erpnext.git
synced 2026-06-02 19:59:12 +00:00
[Fix] Patch broken if serial no has single quote (#10262)
This commit is contained in:
committed by
Makarand Bauskar
parent
ee5ff805e9
commit
046e1a6e28
@@ -26,7 +26,7 @@ def execute():
|
|||||||
if not sales_invoice or not serial_nos:
|
if not sales_invoice or not serial_nos:
|
||||||
continue
|
continue
|
||||||
|
|
||||||
serial_nos = ["'%s'"%no for no in serial_nos.split("\n")]
|
serial_nos = ["'%s'"%frappe.db.escape(no) for no in serial_nos.split("\n")]
|
||||||
|
|
||||||
frappe.db.sql("""
|
frappe.db.sql("""
|
||||||
UPDATE
|
UPDATE
|
||||||
@@ -36,7 +36,7 @@ def execute():
|
|||||||
WHERE
|
WHERE
|
||||||
name in ({serial_nos})
|
name in ({serial_nos})
|
||||||
""".format(
|
""".format(
|
||||||
sales_invoice=sales_invoice,
|
sales_invoice=frappe.db.escape(sales_invoice),
|
||||||
serial_nos=",".join(serial_nos)
|
serial_nos=",".join(serial_nos)
|
||||||
)
|
)
|
||||||
)
|
)
|
||||||
Reference in New Issue
Block a user