Fixed: Missing quoting in State::StateGetStatesByType() (bug#10158).

OTRS · Jan 14, 2014 · c4ec920 · c4ec920
1 parent 7cfaec7
commit c4ec920
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/CHANGES.md b/CHANGES.md
@@ -1,4 +1,5 @@
 #3.2.14 201?-??-??
+ - 2014-01-14 Fixed bug#[10158](http://bugs.otrs.org/show_bug.cgi?id=10158) - Missing quoting in State::StateGetStatesByType().
  - 2014-01-14 Fixed bug#[8969](http://bugs.otrs.org/show_bug.cgi?id=8969) - FAQ module Language files installation fails (Kernel/Language permissions).
  - 2014-01-07 Fixed bug#[9959](http://bugs.otrs.org/show_bug.cgi?id=9959) - & breaks ExpandCustomerName.
  - 2013-12-20 Fixed bug#[10099](http://bugs.otrs.org/show_bug.cgi?id=10099) - Missing challenge token checks on customer interface.

diff --git a/Kernel/System/State.pm b/Kernel/System/State.pm
@@ -418,6 +418,8 @@ sub StateGetStatesByType {
         }
     }
 
+    @StateType = map { $Self->{DBObject}->Quote($_) } @StateType;
+
     my $SQL = ''
         . 'SELECT ts.id, ts.name, tst.name'
         . ' FROM ticket_state ts, ticket_state_type tst'