fix apostrophe in state field (#1021)

department-of-veterans-affairs · Jan 22, 2024 · e54155a · e54155a
1 parent aa42604
commit e54155a
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/app/models/institution.rb b/app/models/institution.rb
@@ -568,15 +568,15 @@ def self.unaccrediteds
           # :nocov:
           if state_country_search[1].present?
             state = state_country_search[1].upcase.strip
-            filters << "state = '#{state}'"
-            filters << "physical_state = '#{state}'"
+            filters << "state = '#{state.gsub("'", "''")}'"
+            filters << "physical_state = '#{state.gsub("'", "''")}'"
             filters << 'state IS NOT NULL'
             filters << 'physical_state IS NOT NULL'
           end
           if state_country_search[2].present?
             country = state_country_search[2].upcase.strip
-            filters << "country = '#{country}'"
-            filters << "physical_country = '#{country}'"
+            filters << "country = '#{country.gsub("'", "''")}'"
+            filters << "physical_country = '#{country.gsub("'", "''")}'"
             filters << 'country IS NOT NULL'
             filters << 'physical_country IS NOT NULL'
           end