The mailing list for listmasters using Sympa

[<address@concealed>]

Hi

Under Sympa v6.1.4 when a subscriber requests a new password from the home
page and their email address contains an apostrophe, the following error is
logged (email/IP substituted for privacy):

Sep  4 12:45:47 listserver wwsympa[4275]: err Auth::create_one_time_ticket()
Unable to insert in table one_time_ticket_table while executing SQL statement
"INSERT INTO one_time_ticket_table (ticket_one_time_ticket,
robot_one_time_ticket, email_one_time_ticket, date_one_time_ticket,
data_one_time_ticket, remote_addr_one_time_ticket, status_one_time_ticket)
VALUES
('2369766531133','xxx.gov.au','address@concealed','1346726747','choosepasswd','123.123.123.123','open')"
 :
You have an error in your SQL syntax; check the manual that corresponds to
your MySQL server version for the right syntax to use near
'address@concealed','1346726747','choosepasswd','180.149.192.139','open')' at
line 1

It appears the associated SQL statement in Auth.pm does not quote the values
for the INSERT as similarly performed for List.pm with $dbh->quote($email).

This is also present in Sympa v6.1.14. Could you please suggest a code fix to
resolve the above bug?

Thanks

Robert Tassoni
National Library of Australia