fix: Procurement Tracker report not working
diff --git a/erpnext/buying/report/procurement_tracker/procurement_tracker.py b/erpnext/buying/report/procurement_tracker/procurement_tracker.py
index 48295be..866bf0c 100644
--- a/erpnext/buying/report/procurement_tracker/procurement_tracker.py
+++ b/erpnext/buying/report/procurement_tracker/procurement_tracker.py
@@ -141,13 +141,13 @@
conditions = ""
if filters.get("company"):
- conditions += " AND company='%s'"% filters.get('company')
+ conditions += " AND company=%s"% frappe.db.escape(filters.get('company'))
if filters.get("cost_center") or filters.get("project"):
conditions += """
- AND (cost_center='%s'
- OR project='%s')
- """% (filters.get('cost_center'), filters.get('project'))
+ AND (cost_center=%s
+ OR project=%s)
+ """% (frappe.db.escape(filters.get('cost_center')), frappe.db.escape(filters.get('project')))
if filters.get("from_date"):
conditions += " AND transaction_date>=%s"% filters.get('from_date')