diff options
| author | HDA (OpenERP) <hda@tinyerp.com> | 2009-10-21 12:55:33 +0530 |
|---|---|---|
| committer | HDA (OpenERP) <hda@tinyerp.com> | 2009-10-21 12:55:33 +0530 |
| commit | 8c64e3c18b4614043aea37c2bbefb633b467809b (patch) | |
| tree | 5e59cae7d1ec9711efa9ee1bcbedb04350fb5666 /bin/addons/base/module/module.py | |
| parent | b7f6bc4c8e2996b7ffdb881835ccb0b9d4f556d1 (diff) | |
Remove sql injection problem
lp bug: https://launchpad.net/bugs/429327 fixed
bzr revid: hda@tinyerp.com-20091021072533-1p0q91xcxoj51k1n
Diffstat (limited to 'bin/addons/base/module/module.py')
| -rw-r--r-- | bin/addons/base/module/module.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/bin/addons/base/module/module.py b/bin/addons/base/module/module.py index ced645fc55d..44e14e686d2 100644 --- a/bin/addons/base/module/module.py +++ b/bin/addons/base/module/module.py @@ -65,7 +65,7 @@ class module_category(osv.osv): _description = "Module Category" def _module_nbr(self,cr,uid, ids, prop, unknow_none,context): - cr.execute('select category_id,count(*) from ir_module_module where category_id in ('+','.join(map(str,ids))+') or category_id in (select id from ir_module_category where parent_id in ('+','.join(map(str,ids))+')) group by category_id') + cr.execute('select category_id,count(*) from ir_module_module where category_id in ('+','.join(map(str, ids))+') or category_id in (select id from ir_module_category where parent_id in ('+','.join(map(str, ids))+')) group by category_id') result = dict(cr.fetchall()) for id in ids: cr.execute('select id from ir_module_category where parent_id=%s', (id,)) |