rabbibotton / clog

CLOG - The Common Lisp Omnificent GUI
Other
1.51k stars 104 forks source link

Non escaped parameters in clog-db-admin::edit-record #135

Closed bendersteed closed 2 years ago

bendersteed commented 2 years ago

When trying to update a record from clog-db-admin, if the row has characters like ', the thread fails with the following error:

Could not prepare an sqlite statement.
Code ERROR: near "Cultural": syntax error.

This occurs because the sql creation in clog-db-admin::edit-record does not properly escape the parameters. I will provide a PR fixing this.