effective_qb_online 0.3.1 → 0.3.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 708e4ea3c01bb95426e9510b340fbc6502a95641fa632a410a23c9cf055b5eb0
-  data.tar.gz: c2c281898e1dd857b878f04a3b0e91c714984cb48a34a3c999e2bd5cdd8d3fad
+  metadata.gz: c2ddde7401c7aaaa2461796d66a640bf9ec38ab749ec858f8ef5e5a403885fb6
+  data.tar.gz: bf8a3d9c0ca0ea906d32e841aede9b8e05fd9b04675f54fb84e7472fa2a1b533
 SHA512:
-  metadata.gz: c4c1e3b37d577e13e520c82851992d5830b526d00265c48533cfe3f31e08209666206621b12eed0ceae5b2fbb0d7c2d3224bc8b5503977ac908ae8051f6f5945
-  data.tar.gz: e649a27a72668157f8b7298f70ed6729ccd42007b4e13ccaebea40c2a4a3d172ce2f31158cdb371aa7bc236b51160777837dc8e72ad5f19b95faf444f13ebb61
+  metadata.gz: ceeb4d37581de7b426ef5fde3f43ef4d2efcb50e75b2b715cfd9ddf91aa827d07fcf75a1f693c5fb9f89c92c7be03364596d0ac56918d13fff2618f38e723e4e
+  data.tar.gz: b161ebde1d8c67e80e95d45a689c7327594920ac4e4b75ccb9e1b581c01abec425609363dc4b1f55d96a5435976812e596a84dab6c58a7c9035c6ae790c1020e

data/app/models/effective/qb_api.rb

@@ -110,7 +110,7 @@ module Effective
 
         # Find by given name and family name
         customer ||= if user.respond_to?(:first_name) && user.respond_to?(:last_name)
-          service.query("SELECT * FROM Customer WHERE GivenName LIKE '#{scrub(user.first_name)}' AND FamilyName LIKE '#{scrub(user.last_name)}'")&.first
+          service.query("SELECT * FROM Customer WHERE GivenName LIKE '#{scrub(user.first_name, sql: true)}' AND FamilyName LIKE '#{scrub(user.last_name, sql: true)}'")&.first
         end
 
         # Find by display name
@@ -217,9 +217,11 @@ module Effective
       end
     end
 
-    def scrub(value)
+    def scrub(value, sql: false)
       return nil unless value.present?
-      value.gsub(':', '')
+      value = value.gsub(':', '')
+      value = value.gsub("'", "\\'") if sql
+      value
     end
 
   end

data/lib/effective_qb_online/version.rb

@@ -1,3 +1,3 @@
 module EffectiveQbOnline
-  VERSION = '0.3.1'.freeze
+  VERSION = '0.3.2'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: effective_qb_online
 version: !ruby/object:Gem::Version
-  version: 0.3.1
+  version: 0.3.2
 platform: ruby
 authors:
 - Code and Effect
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-12-09 00:00:00.000000000 Z
+date: 2023-04-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails