| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 09917 | Bug reports | Other | public | 2015-09-24 09:25 | 2015-09-30 11:01 |
| Reporter | routard | Assigned To | DenisChenu | ||
| Priority | normal | Severity | minor | ||
| Status | closed | Resolution | fixed | ||
| Product Version | 2.06+ | ||||
| Fixed in Version | 2.06+ | ||||
| Summary | 09917: Error when updating a lalel set name containing a simple quote ' | ||||
| Description | When an existing labet set is edited (to change his name), if the name contains an apostrophe ' then the name is troncatad before the '. | ||||
| Additional Information | Maybe a possible SQL injection issue ? The label set names should be treated the same as the templates names (remove all apostrophes ')? | ||||
| Tags | No tags attached. | ||||
| Bug heat | 6 | ||||
| Complete LimeSurvey version number (& build) | 150911 | ||||
| I will donate to the project if issue is resolved | No | ||||
| Browser | |||||
| Database type & version | mysql 5.6.17 | ||||
| Server OS (if known) | Linux Fcm-froxlor03 3.2.0-4-amd64 #1 SMP Debian 3.2.57-3+deb7u1 x86_64 | ||||
| Webserver software & version (if known) | Apache/2.4.9 (Win64) | ||||
| PHP Version | 5.6.6 | ||||
 |
On the screenshot above, the name of the label set was, before editing : Villes du 95 (Val-d'Oise) And when editing the name, it becomes : Villes du 95 (Val-d |
 |
Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=15994 |
 |
Version 2.06+ Build 150930 released |
