0000412: SQL Fatal when using Double-quotes in Text Filters in Grids

412

[In-Portal CMS] Admin Interfaces

bug report

always

2009-10-28 01:44

2010-01-11 22:05

Reporter:

Dmitry

Platform:

Assigned To:

alex

OS:

Priority:

normal

OS Version:

Status:

closed

Product Version:

5.0.2-B1

Product Build:

Resolution:

fixed

ETA:

none

Fixed in Version:

5.0.2-B1

Reference:

http://groups.google.com/group/in-portal-bugs/browse_frm/thread/81868552e0093097

Change Log Message:

Estimate Points:

0

Summary:

0000412: SQL Fatal when using Double-quotes in Text Filters in Grids

Description:

SQL Fatal when using Double-quotes in Text Filters in Grids.

Example - filter"

1. Applies to all text filters including main search one

2. single-quote (') works fine.

Steps To Reproduce:

SQL Fatal

    SELECT Category.* ,(REPLACE(ParentPath, CONCAT('|', Category.CategoryId, '|'), '')) AS `CurrentSort`,(img.SameImages) AS `SameImages`,(img.LocalThumb) AS `LocalThumb`,(img.ThumbPath) AS `ThumbPath`,(img.ThumbUrl) AS `ThumbUrl`,(img.LocalImage) AS `LocalImage`,(img.LocalPath) AS `LocalPath`,(img.Url) AS `FullUrl`,(IF(ThemeId != 0, 1, 0)) AS `CreatedBySystem`,(cust.l1_cust_7) AS `cust_l_ItemTemplate`,(cust.l1_cust_8) AS `cust_RssExpireInterval`,(cust.l1_cust_9) AS `cust_RssUpdateInterval`,(cust.l1_cust_10) AS `cust_RssLastUpdated`,(cust.l1_cust_11) AS `cust_RssDeleteExpired`,(cust.l1_cust_13) AS `cust_RssUpdateIntervalType`,(cust.l1_cust_14) AS `cust_RssSource`,(cust.l1_cust_15) AS `cust_RssExpireIntervalType`,(cust.l1_cust_16) AS `cust_RssDefaultExpiration`,(cust.l1_cust_17) AS `cust_RssDefaultExpirationType`,(cust.l1_cust_18) AS `cust_RssLastExpired`,(cust.l1_cust_20) AS `cust_n_ItemTemplate`,(cust.l1_cust_21) AS `cust_bb_ItemTemplate`,(cust.l1_cust_24) AS `cust_p_ItemTemplate`,(Category.CreatedOn) AS `CreatedOn_date`,(Category.CreatedOn) AS `CreatedOn_time`,(Category.Modified) AS `Modified_date`,(Category.Modified) AS `Modified_time`,( IF(Category.NewItem = 2, IF(Category.CreatedOn >= (UNIX_TIMESTAMP() - 8*3600*24), 1, 0), Category.NewItem )) AS `IsNew`
    FROM Category
    LEFT JOIN Images img ON img.ResourceId = Category.ResourceId AND img.DefaultImg = 1
    LEFT JOIN PermCache ON PermCache.CategoryId = Category.CategoryId
    LEFT JOIN CategoryCustomData cust ON Category.ResourceId = cust.ResourceId
    WHERE ((Category.Status <> 4) AND (Category.ThemeId = 4 OR Category.ThemeId = 0) AND (ParentId = 1) AND (PermId = 1)) AND (((`Category`.`l1_Name` LIKE "%tret\\"%")))
    ORDER BY `Category`.`Priority` desc,`Category`.`l1_Name` asc
    LIMIT 0,21

Additional Information:

Relationships

related to

0000097

closed (5.0.2)

alex

Issues with "Like" type Grid Filters in Admin

Attached Files:

quote_not_escaped_in_search.patch (1,899) 2009-11-10 05:15
http://tracker.in-portal.org/file_download.php?file_id=139&type=bug

2010-01-11 22:05

Dmitry

Note Added: 0001333