Merge branch 'develop' into fix-report-gp
diff --git a/erpnext/accounts/report/gross_profit/gross_profit.py b/erpnext/accounts/report/gross_profit/gross_profit.py
index 2563b66..84c7454 100644
--- a/erpnext/accounts/report/gross_profit/gross_profit.py
+++ b/erpnext/accounts/report/gross_profit/gross_profit.py
@@ -268,9 +268,9 @@
def get_last_purchase_rate(self, item_code, row):
condition = ''
if row.project:
- condition += " AND a.project='%s'" % (row.project)
+ condition += " AND a.project=%s" % (frappe.db.escape(row.project))
elif row.cost_center:
- condition += " AND a.cost_center='%s'" % (row.cost_center)
+ condition += " AND a.cost_center=%s" % (frappe.db.escape(row.cost_center))
if self.filters.to_date:
condition += " AND modified='%s'" % (self.filters.to_date)