~alecu/openobject-server/django-tracebacks

« back to all changes in this revision

Viewing changes to bin/addons/base/res/ir_property.py

Committer: HDA(OpenERP)
Date: 2009-10-21 07:25:33 UTC
Revision ID: hda@tinyerp.com-20091021072533-1p0q91xcxoj51k1n

https://launchpad.net/bugs/429327

Remove sql injection problem

files modified:
bin/addons/base/ir/ir_translation.py

bin/addons/base/module/module.py

bin/addons/base/res/ir_property.py

bin/addons/base/res/partner/partner.py

bin/addons/base/res/res_company.py

Show diffs side-by-side

added added

removed removed

bin/addons/base/res/ir_property.py

}

def unlink(self, cr, uid, ids, context={}):

if ids:

cr.execute('delete from ir_model_fields where id in (select fields_id from ir_property where (fields_id is not null) and (id in ('+','.join(map(str,ids))+')))')

cr.execute('delete from ir_model_fields where id in (select fields_id from ir_property where (fields_id is not null) and (id in ('+','.join(map(str, ids))+')))')

res = super(ir_property, self).unlink(cr, uid, ids, context)

return res

Older »