escape string to avoid fatal on search builder when sort name has an apostrophe

2019-03-18 17:59:47 -04:00
1 changed files with 1 additions and 1 deletions
--- a/CRM/ConstituentsOnly/BAO/ConstituentsOnly.php
+++ b/CRM/ConstituentsOnly/BAO/ConstituentsOnly.php
@@ -228,7 +228,7 @@ class CRM_ConstituentsOnly_BAO_ConstituentsOnly {
            "'{$cid}'",
            "'{$cid}'",
            "'{$prevCacheKey}'",
-            "'" . $newRows[$cid]['sort_name'] . "')",
+            "'" . CRM_Core_DAO::escapeString($newRows[$cid]['sort_name']) . "')",
          ];
          CRM_Core_BAO_PrevNextCache::setItem($prevCache);
        }