From 046e1a6e28ced3c6df8227738a053c5ece023fb4 Mon Sep 17 00:00:00 2001 From: rohitwaghchaure Date: Thu, 3 Aug 2017 17:38:03 +0530 Subject: [PATCH] [Fix] Patch broken if serial no has single quote (#10262) --- .../set_sales_invoice_serial_number_from_delivery_note.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/erpnext/patches/v8_0/set_sales_invoice_serial_number_from_delivery_note.py b/erpnext/patches/v8_0/set_sales_invoice_serial_number_from_delivery_note.py index 2ae74cdbbc..5dedc81d54 100644 --- a/erpnext/patches/v8_0/set_sales_invoice_serial_number_from_delivery_note.py +++ b/erpnext/patches/v8_0/set_sales_invoice_serial_number_from_delivery_note.py @@ -26,7 +26,7 @@ def execute(): if not sales_invoice or not serial_nos: continue - serial_nos = ["'%s'"%no for no in serial_nos.split("\n")] + serial_nos = ["'%s'"%frappe.db.escape(no) for no in serial_nos.split("\n")] frappe.db.sql(""" UPDATE @@ -36,7 +36,7 @@ def execute(): WHERE name in ({serial_nos}) """.format( - sales_invoice=sales_invoice, + sales_invoice=frappe.db.escape(sales_invoice), serial_nos=",".join(serial_nos) ) ) \ No newline at end of file