set action and SQL inserts and embedded single quotation marks

[Brian Bullen <brian@beryl.sol.co.uk>]

******    message to minivend-users from Brian Bullen <brian@beryl.sol.co.uk>     ******

My users are trying to enter text strings with single quotation marks
into a form which is used to insert a new record into a SQL table.
i.e. the action from  mv_todo variable is "set"

To replace single quotes by two quote marks
in values being inserted I think it is necessary to add a line
to sub 'update_data' in minivend itself:

                       HTML::Entities::decode($value) if $decode;              
                        $value =~ s/'/''/g; # 990126 Quote quotation marks 
                        $select_key = $value if $_ eq $prikey;                  
                        push(@v, $value);                             

As these are CGI values being read directly I dont think I can
do the replacement in an mv_click route (with Perl cgi I only get
read access to these values ?)

Regards
Brian

-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list