vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

escape the email account name (#4598)

Browse source
This commit is contained in:
Manas Solanki 2017-12-11 14:29:48 +05:30 • committed by Nabin Hait
parent 24cc7939c8
commit 436ce11c60
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
frappe/email/doctype/email_account/email_account.py
View file

@ -597,7 +597,7 @@ class EmailAccount(Document):
flags = frappe.db.sql("""select name, communication, uid, action from
`tabEmail Flag Queue` where is_completed=0 and email_account='{email_account}'
""".format(email_account=self.name), as_dict=True)
""".format(email_account=frappe.db.escape(self.name)), as_dict=True)
uid_list = { flag.get("uid", None): flag.get("action", "Read") for flag in flags }
if flags and uid_list: