fix: use escape
This commit is contained in:
parent
d944c94d98
commit
3d73ef3c13
1 changed files with 1 additions and 1 deletions
|
|
@ -8,7 +8,7 @@ def execute():
|
|||
|
||||
name_counter = 100000000
|
||||
for contact_detail in contact_details:
|
||||
contact_name = contact_detail.name.replace('"', '\\"').replace("'", "\\'")
|
||||
contact_name = frappe.db.escape(contact_detail.name)
|
||||
|
||||
if contact_detail.email_id:
|
||||
frappe.db.sql("""
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue