|
niallpm
Starting Member
Ireland
8 Posts |
 Posted - May 26 2010 : 10:24:44
|
VPASP V7 around line 2227 in shop$db.asp
templastname=replace(lastname,"'","''")
This replaces apostrophe with double apostrophe in the Lastname field entry during customer login.
Then around line 2234
sql=sql & whereok & " lastname='" & tosql(templastname,"Text") & "'"
Which calls the function tosql which replaces apostrophe with double apostrophe again.
The end result is if your customer is trying to login with lastname O'Sullivan (for example), VPASP will query the field entry O''''Sullivan against the DB and their login will fail.
I fixed this by replacing the line:
sql=sql & whereok & " lastname='" & tosql(templastname,"Text") & "'"
with
sql=sql & whereok & " lastname='" & templastname & "'"
Hope this is useful.
|
|
All Forums
Apostrophe in customer lastname login
New Topic
Printer Friendly
Topic 
TrustGuard - PCI Security Scanner
