From 1541209de025d4ee5d760ec8f48e48ec01611ad7 Mon Sep 17 00:00:00 2001 From: Phuoc Cao Date: Sun, 26 Apr 2026 07:26:06 +0200 Subject: [PATCH] fixed bug in title with single quote --- cao_sunyata/models/entries.py | 9 ++++++--- cao_sunyata/views/blog.py | 2 +- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/cao_sunyata/models/entries.py b/cao_sunyata/models/entries.py index d72724f..4a7899c 100644 --- a/cao_sunyata/models/entries.py +++ b/cao_sunyata/models/entries.py @@ -179,7 +179,7 @@ def create_related(request, id, id_related, new_values): # import pdb;pdb.set_trace() query = "INSERT INTO entries_related (id, id_related, title_related, author_related, edited, creator) " \ "VALUES ('{0}', '{1}', '{2}', '{3}', '{4}', '{5}')".format( - new_values['id'], new_values['id_related'], new_values['title_related'], new_values['author_related'], + new_values['id'], new_values['id_related'], new_values['title_related'].replace("'","''"), new_values['author_related'], new_values['edited'], new_values['creator']) execute_query(request, query, new_values) @@ -208,12 +208,15 @@ def update_entries_url(request): # lire tous les posts entries = get_entries(request) for entry in entries: - slug = urlify(entry.title) + slug = urlify(entry.title.replace("'","-")) query = "UPDATE entries SET title_url = :slug WHERE id = :id;" execute_query(request, query, {'id': entry.id, 'slug': slug}) def update_view_counter(request, id, remote_ip, today): # incrementer le compteur de vues si ip et date sont differents - query = "UPDATE entries SET view_count = view_count + 1, view_date = :today, view_ip = :remote_ip WHERE id = :id;" + query = """ + UPDATE entries SET view_count = view_count + 1, view_date = :today, view_ip = :remote_ip + WHERE id = :id AND INSTR(request.user_agent, "bot") = 0 AND INSTR(request.user_agent, "spider") = 0 + AND INSTR(request.user_agent, "crawler") = 0 AND INSTR(request.user_agent, "+http") = 0;""" execute_query(request, query, {'id': id, 'remote_ip': remote_ip, 'today': today}) diff --git a/cao_sunyata/views/blog.py b/cao_sunyata/views/blog.py index 865c988..f8bbeca 100644 --- a/cao_sunyata/views/blog.py +++ b/cao_sunyata/views/blog.py @@ -127,7 +127,7 @@ def blog_edit(request): if param == 'title': # interdire le car '/' dans le titre à cause du slug new_values['title'] = new_values['title'].replace('/','.') - new_values['title_url'] = urlify(new_values['title']) + new_values['title_url'] = urlify(new_values['title'].replace("'","-")) elif param == 'body': new_values['body'] = new_values['body'].strip() elif param == 'source_link':