fix: use escape

This commit is contained in:
Himanshu Warekar 2019-08-28 00:07:00 +05:30
parent d944c94d98
commit 3d73ef3c13

View file

@ -8,7 +8,7 @@ def execute():
name_counter = 100000000
for contact_detail in contact_details:
contact_name = contact_detail.name.replace('"', '\\"').replace("'", "\\'")
contact_name = frappe.db.escape(contact_detail.name)
if contact_detail.email_id:
frappe.db.sql("""