From ffab8b6bc203e880be6bfd374bb6c2a34024eb2e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Krier?= <ced@b2ck.com>
Date: Tue, 24 Mar 2009 16:26:28 +0100
Subject: [PATCH] Security fix for SQL injection

---
 party.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/party.py b/party.py
index aaf9cdb486..fc339e114b 100644
--- a/party.py
+++ b/party.py
@@ -163,8 +163,8 @@ class Party(ModelSQL, ModelView):
                 'GROUP BY l.party ' \
                 'HAVING ' + \
                     'AND'.join(['(SUM((COALESCE(l.debit, 0) - COALESCE(l.credit, 0))) ' \
-                        + ' ' + x[1] + ' ' + str(x[2]) + ') ' for x in args]),
-                    [code] + today_value + [company_id])
+                        + ' ' + x[1] + ' %s) ' for x in args]),
+                    [code] + today_value + [company_id] + [x[2] for x in args])
         if not cursor.rowcount:
             return [('id', '=', 0)]
         return [('id', 'in', [x[0] for x in cursor.fetchall()])]