Index: openacs-4/packages/dotlrn/www/spam.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/dotlrn/www/spam.tcl,v diff -u -r1.21 -r1.21.6.1 --- openacs-4/packages/dotlrn/www/spam.tcl 30 Oct 2003 16:43:06 -0000 1.21 +++ openacs-4/packages/dotlrn/www/spam.tcl 17 Jun 2004 15:05:24 -0000 1.21.6.1 @@ -41,6 +41,13 @@ db_1row select_sender_info {} +# names can have single quotes in them, and since they are being selected +# from the database as literals down below, when the sender_info query is +# passed to bulk_mail::new, we have to make sure they are properly quoted +set sender_first_names [db_quote $sender_first_names] +set sender_last_name [db_quote $sender_last_name] + + form create spam_message element create spam_message community_id \