Forum GLPI-Project

tomolimo

Member

From: Grenoble, France

Registered: 2009-05-12

Posts: 517

Problem with User::getOrImportByEmail() function when using quotes

Dear all,

When a user email contains a quote char like "Tom.O'Connor@domain.com", then even if the user is existing in DB, it will not be retrieved due to invalid SQL query.
In User::getOrImportByEmail() function, quotes should be escaped before sending request to mySQL.

Thank you,
regards,
Tomolimo

PS: our current version is 0.83.8, but I can see this is still existing with 0.85.4

---

GLPI 9.5.5 - PHP 7.4 / ProcessMaker 3.3.0-community - PHP 7.1 / Windows 2016 / IIS  / MySQL 5.7
Worldwide: >17k Computers, >17k Users (16 languages, >11 timezones), >610k tickets, >6700 entities, >7600 Groups, >20700 process cases
Raynet is ARaymond (https://www.araymond.com) IT service management