mirror of
https://github.com/frappe/erpnext.git
synced 2026-06-01 11:19:09 +00:00
fix: escape fields for Payroll Entry (#22994)
This commit is contained in:
@@ -90,7 +90,7 @@ class PayrollEntry(Document):
|
|||||||
cond = ''
|
cond = ''
|
||||||
for f in ['company', 'branch', 'department', 'designation']:
|
for f in ['company', 'branch', 'department', 'designation']:
|
||||||
if self.get(f):
|
if self.get(f):
|
||||||
cond += " and t1." + f + " = '" + self.get(f).replace("'", "\'") + "'"
|
cond += " and t1." + f + " = " + frappe.db.escape(self.get(f))
|
||||||
|
|
||||||
return cond
|
return cond
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user