fix: escape fields for Payroll Entry (#22994)

2020-08-11 13:12:00 +05:30 · 2020-08-11 13:12:00 +05:30 · 19b51762ef
commit 19b51762ef
parent b7bc34047a
1 changed files with 1 additions and 1 deletions
--- a/erpnext/payroll/doctype/payroll_entry/payroll_entry.py
+++ b/erpnext/payroll/doctype/payroll_entry/payroll_entry.py
@ -90,7 +90,7 @@ class PayrollEntry(Document):
 		cond = ''
 		for f in ['company', 'branch', 'department', 'designation']:
 			if self.get(f):
-				cond += " and t1." + f + " = '" + self.get(f).replace("'", "\'") + "'"
+				cond += " and t1." + f + " = " + frappe.db.escape(self.get(f))

 		return cond