Skip to content

single quote in email address makes any request to the database dying. #2

@jdeantoni

Description

@jdeantoni

Wints is storing emails and use them as keys for the DB. When the email contains an apostrophe (i.e., ' : a single quote) then the query dies silently.
I guess they should be protected by adding a single quote before the problematic quote: https://www.databasestar.com/sql-escape-single-quote/

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions