fix(core): escape quotes before sending SQL queries

Fixes #5010
2026-07-03 07:44:25 +00:00 · 2020-04-23 13:49:15 -04:00
parent 1801d0d60f
commit 04a6217512
1 changed files with 1 additions and 1 deletions
@@ -118,7 +118,7 @@
    if ([val isKindOfClass:[NSNumber class]])
      qValue = [val stringValue];
    else if ([val isKindOfClass:[NSString class]]) {
-      qValue = [NSString stringWithFormat: @"'%@'", val];
+      qValue = [NSString stringWithFormat: @"'%@'", [val stringByReplacingString: @"'" withString: @"\\'"]];
    }
    else {
      qValue = @"NULL";