vignesh/dolibarr
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix duplicate escaping

Browse source
This commit is contained in:
Laurent Destailleur 2026-06-21 15:31:13 +02:00
parent 5ec507d097
commit b254f9ac5d
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
htdocs/core/class/fields/checkboxfield.class.php
View file

@ -248,8 +248,8 @@ class CheckboxField extends CommonSelectField
$alias = $fieldInfos->sqlAlias ?? 't.';
$field = $this->db->sanitize($alias . ($fieldInfos->nameInTable ?? $key));
$tmp = "'" . implode("','", array_map(array($this->db, 'escape'), $value)) . "'";
return " AND " . $field . " IN (" . $this->db->sanitize($tmp, 1) . ")";
$sanitizedSqlIn = "'" . implode("','", array_map(array($this->db, 'escape'), $value)) . "'";
return " AND " . $field . " IN (" . $sanitizedSqlIn . ")";
}
return '';