[Koha-bugs] [Bug 20945] Report params not escaped when downloading

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Mon Jun 18 23:37:06 CEST 2018


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20945

Katrin Fischer <katrin.fischer at bsz-bw.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |katrin.fischer at bsz-bw.de

--- Comment #2 from Katrin Fischer <katrin.fischer at bsz-bw.de> ---
I've been testing with the following SQL:

select * from borrowers where firstname like <<TEST|Asort1>> and surname like
<<surname>>

Asort1 has a % in my test. But I can download fine in all formats and the URL
looks like this:

cgi-bin/koha/reports/guided_reports.pl?reports=2&phase=Run+this+report&param_name=TEST|Asort1&sql_params=%25&param_name=surname&sql_params=%25

Can you explain more about the problem? What am I missing?

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list