From 519c1b45f4baed4a6b1b99f9adf0f12303544c85 Mon Sep 17 00:00:00 2001 From: mdb Date: Mon, 15 Dec 2003 23:12:47 +0000 Subject: [PATCH] Safety first! git-svn-id: https://samskivert.googlecode.com/svn/trunk@1354 6335cc39-0255-0410-8fd6-9bcaacd3b74c --- .../src/java/com/samskivert/servlet/user/UserRepository.java | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/projects/samskivert/src/java/com/samskivert/servlet/user/UserRepository.java b/projects/samskivert/src/java/com/samskivert/servlet/user/UserRepository.java index a9cfa19b..7054b069 100644 --- a/projects/samskivert/src/java/com/samskivert/servlet/user/UserRepository.java +++ b/projects/samskivert/src/java/com/samskivert/servlet/user/UserRepository.java @@ -1,5 +1,5 @@ // -// $Id: UserRepository.java,v 1.36 2003/11/13 02:33:33 ray Exp $ +// $Id: UserRepository.java,v 1.37 2003/12/15 23:12:47 mdb Exp $ // // samskivert library - useful routines for java programs // Copyright (C) 2001 Michael Bayne @@ -44,6 +44,7 @@ import com.samskivert.jdbc.jora.FieldMask; import com.samskivert.jdbc.jora.Session; import com.samskivert.jdbc.jora.Table; import com.samskivert.util.HashIntMap; +import com.samskivert.util.StringUtil; import com.samskivert.servlet.SiteIdentifier; @@ -192,6 +193,7 @@ public class UserRepository extends JORARepository public User loadUser (String username) throws PersistenceException { + username = StringUtil.replace(username, "'", "\\'"); return loadUserWhere("where username = '" + username + "'"); }