From d22e932839dac46c7497d7c34391bc2b78ae1f42 Mon Sep 17 00:00:00 2001
From: Wolfgang Sourdeau <wsourdeau@inverse.ca>
Date: Mon, 23 Jun 2008 14:19:38 +0000
Subject: [PATCH] Monotone-Parent: 8741439b1a08b29f89d1ab07bbe641db0e032388
 Monotone-Revision: 187fad3b4acd4bab3a2b6c286a0f9dc3789c5b83

Monotone-Author: wsourdeau@inverse.ca
Monotone-Date: 2008-06-23T14:19:38
Monotone-Branch: ca.inverse.sogo
---
 SOPE/GDLContentStore/ChangeLog          |  5 +++++
 SOPE/GDLContentStore/GCSFolderManager.m | 26 ++++++++++++-------------
 2 files changed, 18 insertions(+), 13 deletions(-)

diff --git a/SOPE/GDLContentStore/ChangeLog b/SOPE/GDLContentStore/ChangeLog
index b7368237b..bc33ea28d 100644
--- a/SOPE/GDLContentStore/ChangeLog
+++ b/SOPE/GDLContentStore/ChangeLog
@@ -1,3 +1,8 @@
+2008-06-23  Wolfgang Sourdeau  <wsourdeau@inverse.ca>
+
+	* GCSFolderManager.m ([GCSFolderManager
+	-createFolderOfType:withName:atPath:]): escape the display names.
+
 2008-06-13  Wolfgang Sourdeau  <wsourdeau@inverse.ca>
 
 	* GCSFolder.m: modified the fetchFields* methods so that any field
diff --git a/SOPE/GDLContentStore/GCSFolderManager.m b/SOPE/GDLContentStore/GCSFolderManager.m
index 184813849..c7ec78fc8 100644
--- a/SOPE/GDLContentStore/GCSFolderManager.m
+++ b/SOPE/GDLContentStore/GCSFolderManager.m
@@ -753,19 +753,19 @@ static NSCharacterSet *asciiAlphaNumericCS  = nil;
     = [[folderInfoLocation absoluteString] stringByDeletingLastPathComponent];
 
   sql = [NSString stringWithFormat: @"INSERT INTO %@"
-                       @"        (c_path, c_path1, c_path2, c_path3, c_path4,"
-                       @"         c_foldername, c_location, c_quick_location,"
-                       @"         c_acl_location, c_folder_type)"
-                       @" VALUES ('%@', %@, %@, %@, %@, '%@', '%@/%@',"
-                       @"         '%@/%@', '%@/%@', '%@')",
-                       [self folderInfoTableName], _path,
-                       [paths objectAtIndex: 1], [paths objectAtIndex: 2],
-                       [paths objectAtIndex: 3], [paths objectAtIndex: 4],
-                       _name,
-		       baseURL, tableName,
-		       baseURL, quickTableName,
-		       baseURL, aclTableName,
-                       _type];
+		  @"        (c_path, c_path1, c_path2, c_path3, c_path4,"
+		  @"         c_foldername, c_location, c_quick_location,"
+		  @"         c_acl_location, c_folder_type)"
+		  @" VALUES ('%@', %@, %@, %@, %@, '%@', '%@/%@',"
+		  @"         '%@/%@', '%@/%@', '%@')",
+		  [self folderInfoTableName], _path,
+		  [paths objectAtIndex: 1], [paths objectAtIndex: 2],
+		  [paths objectAtIndex: 3], [paths objectAtIndex: 4],
+		  [_name stringByReplacingString: @"'" withString: @"''"],
+		  baseURL, tableName,
+		  baseURL, quickTableName,
+		  baseURL, aclTableName,
+		  _type];
   if ((error = [channel evaluateExpressionX:sql]) != nil)
     return error;