An SQL error will result when "submitting" a SITE PAGE creation/administration if the "Link description" includes a single quote. (DRUPAL release candidate 4.1.0 downloaded on 16 Jan 2003).

For example, placing the following text as a "Link description" will generate the SQL error:  LET'S CRASH THIS

It appears that the single quote is not being escaped in the string, and this causes the resulting SQL statement to be invalid.

Good luck. Cheers, John

Comments

dries’s picture

ax’s picture

Priority: Minor » Critical