added in double quotes for single in query

components/myportal/advancedsearch.js

@@ -25,7 +25,7 @@ let AdvancedSearch = (props) => {
 
     const { LPAData, onSubmit, handleSubmit } = props;
 
-    console.log("props here:", props.props);
+    //console.log("props here:", props.props);
 
     const appealOptionsObj = _.isEmpty(props)
         ? [{}]

components/newappeal/complete.js

@@ -68,7 +68,8 @@ let CompleteAppeal = (props) => {
         );
 
         console.log("patching////////");
-        patchCase(incidentId);
+        //
+        //patchCase(incidentId);
     }, [
         props.appealType.caseReference,
         props.props.form.appealForm.values,

components/search.js

@@ -10,7 +10,7 @@ export default function Search(props) {
 
     const router = useRouter();
     const { locale } = router;
-    console.log("props here:", props.myportal || false);
+    //console.log("props here:", props.myportal || false);
 
     return (
         <main

components/search/searchresults.js

@@ -749,8 +749,7 @@ const SearchResults = (props) => {
             getSearchPageResults(1, orderByState, fieldSortState);
             setLoginToWatch(false);
         } else {
-            console.log("or am in here");
+            //console.log("or am in here");
-
             setLoginToWatch(false);
         }
     }, [

pages/api/endpoint/getadvancedsearch_api.js

@@ -79,6 +79,7 @@ export default async function ApiProxy(req, res) {
             : "";
 
     //console.log(queryString);
+    queryString = queryString.replace(/\'/g, "''");
 
     var queryUrl =
         "incidents?$select=description,numberofchildincidents,_accountid_value,_customerid_value,_pinswg_associatedlpa_value,_ownerid_value,pinswg_appealcasetype,statuscode,ticketnumber,title, _primarycontactid_value,pinswg_lpareference&$expand=primarycontactid($select=fullname)&$filter=" +

pages/api/endpoint/getadvancedsearchpaged_api.js

@@ -113,6 +113,8 @@ export default async function ApiProxy(req, res) {
             ? " statuscode eq " + searchString.statuscode + " and"
             : "";
 
+    queryString = queryString.replace(/\'/g, "''");
+
     var queryUrl =
         "incidents?$select=description,numberofchildincidents,_accountid_value,_customerid_value,_pinswg_associatedlpa_value,_ownerid_value,pinswg_appealcasetype,statuscode,ticketnumber,title, _primarycontactid_value,pinswg_lpareference&$expand=primarycontactid($select=fullname)&$filter=" +
         queryString +

pages/api/endpoint/getbasicdnsurlsearch_api.js

@@ -43,6 +43,8 @@ export default async function ApiProxy(req, res) {
     var searchString = req.query.searchString;
     var token = await getToken();
 
+    searchString = searchString.replace(/\'/g, "''");
+
     var queryUrl =
         "incidents?$select=description,numberofchildincidents,_accountid_value,_customerid_value,_pinswg_associatedlpa_value,_ownerid_value,pinswg_appealcasetype,statuscode,ticketnumber,title, _primarycontactid_value,pinswg_lpareference&$expand=primarycontactid($select=fullname)&$filter=(contains(title, '" +
         searchString +

pages/api/endpoint/getbasicsearch_api.js

@@ -42,6 +42,8 @@ export default async function ApiProxy(req, res) {
     var searchString = req.query.searchString;
     var token = await getToken();
 
+    searchString = searchString.replace(/\'/g, "''");
+
     var queryUrl =
         "incidents?$select=description,numberofchildincidents,_accountid_value,_customerid_value,_pinswg_associatedlpa_value,_ownerid_value,pinswg_appealcasetype,statuscode,ticketnumber,title, _primarycontactid_value,pinswg_lpareference&$expand=primarycontactid($select=fullname)&$filter=(contains(title, '" +
         searchString +

pages/api/endpoint/getbasicsearchpaged_api.js

@@ -76,6 +76,8 @@ export default async function ApiProxy(req, res) {
     var fieldSort = req.query.fieldSort;
     var showNumberOfRecords = req.query.showNumberOfRecords;
 
+    searchString = searchString.replace(/\'/g, "''");
+
     var queryUrl =
         "incidents?$select=description,numberofchildincidents,_accountid_value,_customerid_value,_pinswg_associatedlpa_value,_ownerid_value,pinswg_appealcasetype,statuscode,ticketnumber,title, _primarycontactid_value,pinswg_lpareference&$expand=primarycontactid($select=fullname)&$filter=(contains(title, '" +
         searchString +

pages/api/endpoint/getpartsavedappeal_api.js

@@ -25,6 +25,8 @@ export default async function ApiProxy(req, res) {
     var searchString = req.query.searchString;
     var token = await getToken();
 
+    searchString = searchString.replace(/\'/g, "''");
+
     var queryUrl =
         "incidents?$select=description,numberofchildincidents,_accountid_value,_customerid_value,_pinswg_associatedlpa_value,_ownerid_value,pinswg_appealcasetype,statuscode,ticketnumber,title, _primarycontactid_value,pinswg_lpareference&$expand=primarycontactid($select=fullname)&$filter=(contains(title, '" +
         searchString +