# HG changeset patch
# User HIROSE Yuuji <yuuji@gentei.org>
# Date 1503359493 -32373
# Node ID 929a925f10d8716d592c9a0833f4367615906fa9
# Parent  4c6a3bacfec30bee494e840c6669d035aa9161db
Group name used at the following query should be quoted.

diff -r 4c6a3bacfec3 -r 929a925f10d8 s4-blog.sh
--- a/s4-blog.sh	Tue Aug 22 08:20:02 2017 +0859
+++ b/s4-blog.sh	Tue Aug 22 08:51:06 2017 +0859
@@ -963,6 +963,7 @@
   fi
   title=`getvalbyid blog title $rowid`
   owner=`getvalbyid blog owner $rowid`
+  qowner=`sqlquotestr "$owner"`
   if [ -z "$title" ]; then
     echo "日記番号指定が無効です。" | html p
     return
@@ -981,7 +982,7 @@
   if isuser "$owner"; then
     subtitle="`gecos $owner` さんの話題"
   else
-    grprowid=`query "select rowid from grp where gname=\"$owner\";"`
+    grprowid=`query "select rowid from grp where gname=$qowner;"`
     subtitle="グループ
      <a href=\"?grp+$grprowid\" accesskey=\"h\" title=\"H\">$owner</a> での話題
     	`query \"SELECT printf('(チーム:%s)', val)\