From 19a8ebe8a5912e4f351ba117a523aff986d8ee96 Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Wed, 29 Apr 2026 11:45:24 +0000 Subject: [PATCH] fix(payment_entry): convert the date args to string type before escaping in `get_outstanding_reference_documents` (backport #54639) (#54648) Co-authored-by: diptanilsaha fix(payment_entry): convert the date args to string type before escaping in `get_outstanding_reference_documents` (#54639) --- erpnext/accounts/doctype/payment_entry/payment_entry.py | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/erpnext/accounts/doctype/payment_entry/payment_entry.py b/erpnext/accounts/doctype/payment_entry/payment_entry.py index a582d31044b..80f7305b1bc 100644 --- a/erpnext/accounts/doctype/payment_entry/payment_entry.py +++ b/erpnext/accounts/doctype/payment_entry/payment_entry.py @@ -2328,16 +2328,19 @@ def get_outstanding_reference_documents(args, validate=False): } for fieldname, date_fields in date_fields_dict.items(): + from_date = frappe.db.escape(str(args.get(date_fields[0]))) if args.get(date_fields[0]) else None + to_date = frappe.db.escape(str(args.get(date_fields[1]))) if args.get(date_fields[1]) else None + if args.get(date_fields[0]) and args.get(date_fields[1]): - condition += f" and {fieldname} between {frappe.db.escape(args.get(date_fields[0]))} and {frappe.db.escape(args.get(date_fields[1]))}" + condition += f" and {fieldname} between {from_date} and {to_date}" posting_and_due_date.append(ple[fieldname][args.get(date_fields[0]) : args.get(date_fields[1])]) elif args.get(date_fields[0]): # if only from date is supplied - condition += f" and {fieldname} >= {frappe.db.escape(args.get(date_fields[0]))}" + condition += f" and {fieldname} >= {from_date}" posting_and_due_date.append(ple[fieldname].gte(args.get(date_fields[0]))) elif args.get(date_fields[1]): # if only to date is supplied - condition += f" and {fieldname} <= {frappe.db.escape(args.get(date_fields[1]))}" + condition += f" and {fieldname} <= {to_date}" posting_and_due_date.append(ple[fieldname].lte(args.get(date_fields[1]))) if args.get("company"):