Merge pull request #263 from MSusik/orcidpush

webauthorprofile: fix query escaping
inspirehep · Aug 31, 2015 · 6da1c1e · 6da1c1e
2 parents 05c2209 + 9938398
commit 6da1c1e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/webauthorprofile/lib/webauthorprofile_corefunctions.py b/modules/webauthorprofile/lib/webauthorprofile_corefunctions.py
@@ -420,7 +420,7 @@ def get_orcid_pubs(person_id):
 
         orcid_pubs = dict()
         for doi, title in orcid_dois:
-            queried_doi = run_sql('SELECT value from bib02x where tag="0247_a" and value="%s"', (doi,))
+            queried_doi = run_sql('SELECT value from bib02x where tag="0247_a" and value=%s', (doi,))
             if not queried_doi:
                 # The paper is not available in Inspire
                 orcid_pubs[doi] = title