Closed (fixed)
Project:
Drupal core
Version:
4.1.0
Component:
page.module
Priority:
Critical
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
19 Jan 2003 at 03:16 UTC
Updated:
7 Feb 2003 at 00:35 UTC
An SQL error will result when "submitting" a SITE PAGE creation/administration if the "Link description" includes a single quote. (DRUPAL release candidate 4.1.0 downloaded on 16 Jan 2003).
For example, placing the following text as a "Link description" will generate the SQL error: LET'S CRASH THIS
It appears that the single quote is not being escaped in the string, and this causes the resulting SQL statement to be invalid.
Good luck. Cheers, John
Comments
Comment #1
dries commentedComment #2
ax commented