CRM-19641 Further Fix
authorSeamus Lee <seamuslee001@gmail.com>
Wed, 23 Nov 2016 02:46:33 +0000 (13:46 +1100)
committerSeamus Lee <seamuslee001@gmail.com>
Wed, 23 Nov 2016 02:47:19 +0000 (13:47 +1100)
CRM/Case/XMLProcessor/Report.php

index 8f460c53e8bee9a4a923b0471688d813533007be..2cd0e4d40634887bf63592906c84518e90298d53 100644 (file)
@@ -688,10 +688,11 @@ SELECT label, value
 
       foreach ($sql as $tableName => $values) {
         $columnNames = implode(',', $values);
-        $tableName = CRM_Utils_Type::escape($tableName, 'MysqlColumnNameOrAlias');
+        $title = CRM_Core_DAO::escapeString($groupTitle[$tableName]);
+        $mysqlTableName = CRM_Utils_Type::escape($tableName, 'MysqlColumnNameOrAlias');
         $sql[$tableName] = "
-SELECT '" . CRM_Core_DAO::escapeString($groupTitle[$tableName]) . "' as groupTitle, $columnNames
-FROM   $tableName
+SELECT '" . $title . "' as groupTitle, $columnNames
+FROM   $mysqlTableName
 WHERE  entity_id = %1
 ";
       }