commit 562227db8f3b0d70b6b8e1b45d730a51cc851fd0
author Shreya Shah <shreyashah115@gmail.com> Mon Apr 02 10:12:37 2018 +0530
committer Nabin Hait <nabinhait@gmail.com> Mon Apr 02 10:12:37 2018 +0530
tree 75350abeec3601e56692960ddca3c5aae7e1a7fc
parent 9c1cac80fe36286c55a75c7c2db0e5c677578b8d

db escape as single quote in address causes error (#13451)

erpnext/setup/doctype/company/delete_company_transactions.py

diff --git a/erpnext/setup/doctype/company/delete_company_transactions.py b/erpnext/setup/doctype/company/delete_company_transactions.py
index d975a9e..247445d 100644
--- a/erpnext/setup/doctype/company/delete_company_transactions.py
+++ b/erpnext/setup/doctype/company/delete_company_transactions.py
@@ -85,7 +85,7 @@
 			in ({leads})""".format(leads=",".join(leads)))
 
 		if addresses:
-			addresses = ["'%s'"%addr for addr in addresses]
+			addresses = ["'%s'"%frappe.db.escape(addr) for addr in addresses]
 
 			frappe.db.sql("""delete from tabAddress where name in ({addresses}) and 
 				name not in (select distinct dl1.parent from `tabDynamic Link` dl1