[eml-dev] [Bug 2756] New: - Single quote characters from data are not escaped when performing inserts

bugzilla-daemon@ecoinformatics.org bugzilla-daemon at ecoinformatics.org
Thu Feb 1 15:38:17 PST 2007


http://bugzilla.ecoinformatics.org/show_bug.cgi?id=2756

           Summary: Single quote characters from data are not escaped when
                    performing inserts
           Product: EML
           Version: 2.0.1
          Platform: Macintosh
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: datamanager
        AssignedTo: tao at nceas.ucsb.edu
        ReportedBy: cburt at msi.ucsb.edu
         QAContact: eml-dev at ecoinformatics.org


recieved this error:
DatabaseLoader.run(): Error message: ERROR: syntax error at or near "only"
regarding this line:
INSERT into ... calm','"adrift; CTD dropped to 100' only; slight breeze"'

It seems that if a single quote is present within the data being entered it is
not escaped. On this line "only" is seen as a postgres command since "100'"
came before it.


More information about the Eml-dev mailing list