Repository: airavata Updated Branches: refs/heads/develop 93a4a66f4 -> c0779c077
fixing AIRAVATA-2276 SQL escaping error in sharing registry: An error occurred while parsing the query filter Project: http://git-wip-us.apache.org/repos/asf/airavata/repo Commit: http://git-wip-us.apache.org/repos/asf/airavata/commit/c0779c07 Tree: http://git-wip-us.apache.org/repos/asf/airavata/tree/c0779c07 Diff: http://git-wip-us.apache.org/repos/asf/airavata/diff/c0779c07 Branch: refs/heads/develop Commit: c0779c077240dd63a0167eea73ef301cf80b6ba7 Parents: 93a4a66 Author: scnakandala <[email protected]> Authored: Thu Dec 15 12:58:28 2016 -0500 Committer: scnakandala <[email protected]> Committed: Thu Dec 15 12:58:28 2016 -0500 ---------------------------------------------------------------------- .../sharing/registry/db/repositories/AbstractRepository.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/airavata/blob/c0779c07/modules/sharing-registry/sharing-registry-server/src/main/java/org/apache/airavata/sharing/registry/db/repositories/AbstractRepository.java ---------------------------------------------------------------------- diff --git a/modules/sharing-registry/sharing-registry-server/src/main/java/org/apache/airavata/sharing/registry/db/repositories/AbstractRepository.java b/modules/sharing-registry/sharing-registry-server/src/main/java/org/apache/airavata/sharing/registry/db/repositories/AbstractRepository.java index d0117ef..d206616 100644 --- a/modules/sharing-registry/sharing-registry-server/src/main/java/org/apache/airavata/sharing/registry/db/repositories/AbstractRepository.java +++ b/modules/sharing-registry/sharing-registry-server/src/main/java/org/apache/airavata/sharing/registry/db/repositories/AbstractRepository.java @@ -126,7 +126,7 @@ public abstract class AbstractRepository<T, E, Id> { if(filters != null && filters.size() != 0){ query += " WHERE "; for(String k : filters.keySet()){ - query += "p." + k + " = '" + filters.get(k) + "' AND "; + query += "p." + k + " = '" + filters.get(k).replaceAll("'", "''") + "' AND "; } query = query.substring(0, query.length()-5); }
