[Pkg-roundcube-maintainers] Bug#538087: [roundcube] Special characters in fields

[Eugene Paskevich]

Package: roundcube
Version: 0.2.2-1
Severity: minor

--- Please enter the report below this line. ---
I've tried to populate my identity with Organization line that contains '  
(apostrophe) and got the following in the system logs:

roundcube: MDB2 Error: syntax error (-2): _skipDelimitedStrings: [Error  
message: query with an unterminated text string specified]#012[Last  
executed query: DEALLOCATE PREPARE  
mdb2_statement_mysql_254d4fbcf347494e49482ce2c51cae5d6e7a9aa80]#012[Native  
code: 0]
roundcube: [23-Jul-2009 02:05:37 +0300] DB Error: _skipDelimitedStrings:  
[Error message: query with an unterminated text string specified]#012[Last  
executed query: DEALLOCATE PREPARE  
mdb2_statement_mysql_254d4fbcf347494e49482ce2c51cae5d6e7a9aa80]#012[Native  
code: 0]#012 in /usr/share/roundcube/program/include/rcube_mdb2.php on  
line 255 (POST /webmail/?_task=settings&_action=save-identity)

Please make sure special characters are properly escaped.

--- System information. ---
Architecture: i386
Kernel:       Linux 2.6.30-1-686

Debian Release: squeeze/sid
   500 unstable        www.debian-multimedia.org
   500 unstable        debian.org.ua
   500 unstable        debian.ejohansson.se
   500 unstable        deb.opera.com
   500 testing         security.debian.org

--- Package information. ---
Depends                 (Version) | Installed
=================================-+-=============
roundcube-core        (= 0.2.2-1) | 0.2.2-1
dbconfig-common                   | 1.8.41
debconf                 (>= 0.5)  | 1.5.27
  OR debconf-2.0                   |
apache2                           | 2.2.11-7
  OR lighttpd                      |
  OR httpd                         |
php5                              | 5.2.10.dfsg.1-2
php5-mcrypt                       | 5.2.10.dfsg.1-2
php5-gd                           | 5.2.10.dfsg.1-2
roundcube-sqlite     (= 0.2.2-1)  |
  OR roundcube-mysql  (= 0.2.2-1)  | 0.2.2-1
  OR roundcube-pgsql   (= 0.2.2-1) |
php-mdb2                          | 2.5.0b2-1
php-auth                          | 1.6.1-1
php-net-smtp                      | 1.3.1-1
php-net-socket                    | 1.0.9-2
php-mail-mime          (>= 1.5.0) | 1.5.2-0.1
ucf                               | 3.0018
tinymce                    (>= 3) | 3.2.1.1-0.1
libmagic1                         | 5.03-1
php5-pspell                       | 5.2.10.dfsg.1-2


-- 
Eugene Paskevich             |   *==)-----------   |     Plug me into
eugene at raptor.kiev.ua        |   -----------(==*   |      The Matrix