EditBug:10105 Python error from tag contents


 * EditBug:10105 Python error from tag contents OPEN A new editor submitted a magazine with the Tag set to "The World's Greatest Fantasy Magazine". On approval I got a Python error.  See the details for the error. It says there's an error in the SQL syntax as apparently the embedded quote did not get escaped.  23:45, 31 May 2007 (CDT)

Publication Update - SQL Statements SQL Updates:

* insert into pubs(pub_title) values('xxx'); * update pubs set pub_title='The Poetic Knight, Vol. #1, Issue #8' where pub_id=195253 * update pubs set pub_tag='The World\'s Greatest Fantasy Magazine' where pub_id=195253 * update pubs set pub_tag='The World's Greatest Fantasy Magazine' where pub_id=195253 --> --> ProgrammingError	Python 2.4.2: /usr/local/bin/python Thu May 31 23:41:28 2007

A problem occurred in a Python script. Here is the sequence of function calls leading up to the error, in the order they occurred. /www/isfdb.tamu.edu/root/cgi-bin/mod/pa_new.cgi 471        print " " 472        473         Record = DoSubmission(db, submission) 474        475         print " " Record undefined, DoSubmission = , db = <_mysql.connection open to 'localhost' at 832740c>, submission = 615973 /www/isfdb.tamu.edu/root/cgi-bin/mod/pa_new.cgi in DoSubmission(db=<_mysql.connection open to 'localhost' at 832740c>, submission=615973) 288                merge = doc.getElementsByTagName('NewPub') 289                UpdatePubColumn(merge, 'Title',   'pub_title',      Record) 290                UpdatePubColumn(merge, 'Tag',     'pub_tag',        Record) 291                UpdatePubColumn(merge, 'Year',    'pub_year',       Record) 292                UpdatePubColumn(merge, 'Pages',   'pub_pages',      Record) global UpdatePubColumn = , merge = [], Record = 195253L /www/isfdb.tamu.edu/root/cgi-bin/mod/pa_new.cgi in UpdatePubColumn(doc=[], tag="The World's Greatest Fantasy Magazine", column='pub_tag', id=195253L) 108                print " ", update 109                if debug == 0: 110                        db.query(update) 111        112 def UpdateTitleColumn(doc, tag, column, id): global db = <_mysql.connection open to 'localhost' at 832740c>, db.query = , update = "update pubs set pub_tag='The World's Greatest Fantasy Magazine' where pub_id=195253"

ProgrammingError: (1064, "You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 's Greatest Fantasy Magazine' where pub_id=195253' at line 1") args = (1064, "You have an error in your SQL syntax; check the ... Fantasy Magazine' where pub_id=195253' at line 1")