commit c1cf495a93b16a0e01a632cbb2ecf0e79c92c851
author rohitwaghchaure <rohitw1991@gmail.com> Sun Jun 03 16:00:31 2018 +0530
committer Nabin Hait <nabinhait@gmail.com> Sun Jun 03 16:00:31 2018 +0530
tree 2b289eac2fc53175419da50d1aade1ac33e7f90f
parent ce642d73cb092618197fad03394b930a4ecb7654

[Fix] Special character issue (#14322)

erpnext/setup/doctype/authorization_control/authorization_control.py

diff --git a/erpnext/setup/doctype/authorization_control/authorization_control.py b/erpnext/setup/doctype/authorization_control/authorization_control.py
index 7d5e80b..2240e0c 100644
--- a/erpnext/setup/doctype/authorization_control/authorization_control.py
+++ b/erpnext/setup/doctype/authorization_control/authorization_control.py
@@ -40,7 +40,7 @@
 		chk = 1
 		add_cond1,add_cond2	= '',''
 		if based_on == 'Itemwise Discount':
-			add_cond1 += " and master_name = '"+cstr(item).replace("'", "\\'")+"'"
+			add_cond1 += " and master_name = '"+cstr(frappe.db.escape(item)).replace("'", "\\'")+"'"
 			itemwise_exists = frappe.db.sql("""select value from `tabAuthorization Rule`
 				where transaction = %s and value <= %s
 				and based_on = %s and company = %s and docstatus != 2 %s %s""" %