[Tickets #9090] First time login : error in sql query - single quote

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/9090
------------------------------------------------------------------------------
  Ticket             | 9090
  Created By         | rsalmon at mbpgroup.com
  Summary            | First time login : error in sql query - single quote
  Queue              | Turba
  Version            | Git master
  Type               | Bug
  State              | Unconfirmed
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


rsalmon at mbpgroup.com (2010-06-10 11:15) wrote:

we use mysql

First time a user logs in, I get the folowing error :
MDB2 Error: unknown error

 From /tmp/horde.log :
ERR: HORDE [turba] MDB2 Error: unknown error: _execute: [Error  
message: Unable to execute statement]
[Last executed query: INSERT INTO turba_shares (share_name,  
share_owner, attribute_name, attribute_params, perm_creator,  
perm_default, perm_guest, share_flags, share_id) VALUES (?, ?, ?, ?,  
?, ?, ?, ?, ?)]
[Native code: 0]
  [pid 13193 on line 157of  
"/var/www/html/horde/libs/Horde/Share/Object/Sql.php"]


 From debuging :

$params = (
     [0] => ce4e0f4be99b33113ba0a0bf47bcf31b
     [1] => rsalmon
     [2] => Ronan SALMON's Address Book
     [3] =>  
a:3:{s:6:"source";s:8:"localsql";s:7:"default";b:1;s:4:"name";s:7:"rsalmon";}
     [4] => 0
     [5] => 0
     [6] => 0
     [7] => 0
     [8] => 32
)

If I run the following query from mysql command line (with double  
quotes in attribute_name), I then can log in :
  INSERT INTO turba_shares (share_name, share_owner, attribute_name,  
attribute_params, perm_creator, perm_default, perm_guest, share_flags,  
share_id) VALUES ( 'ce4e0f4be99b33113ba0a0bf47bcf31b','rsalmon','Ronan  
SALMON''s Address  
Book','a:3:{s:6:"source";s:8:"localsql";s:7:"default";b:1;s:4:"name";s:7:"rsalmon";}',0,0,0,0,32);