From 562227db8f3b0d70b6b8e1b45d730a51cc851fd0 Mon Sep 17 00:00:00 2001 From: Shreya Shah Date: Mon, 2 Apr 2018 10:12:37 +0530 Subject: [PATCH] db escape as single quote in address causes error (#13451) --- erpnext/setup/doctype/company/delete_company_transactions.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/erpnext/setup/doctype/company/delete_company_transactions.py b/erpnext/setup/doctype/company/delete_company_transactions.py index d975a9ee8d..247445da5d 100644 --- a/erpnext/setup/doctype/company/delete_company_transactions.py +++ b/erpnext/setup/doctype/company/delete_company_transactions.py @@ -85,7 +85,7 @@ def delete_lead_addresses(company_name): in ({leads})""".format(leads=",".join(leads))) if addresses: - addresses = ["'%s'"%addr for addr in addresses] + addresses = ["'%s'"%frappe.db.escape(addr) for addr in addresses] frappe.db.sql("""delete from tabAddress where name in ({addresses}) and name not in (select distinct dl1.parent from `tabDynamic Link` dl1