Fixes #10152: QCC() - Stored Procedure to escape : and ,

extension/Classes/Sql/function.sql

@@ -43,13 +43,29 @@ END;
 #
 DROP FUNCTION IF EXISTS QBAR;
 CREATE FUNCTION QBAR(input TEXT)
-  RETURNS TEXT
-  DETERMINISTIC
-  SQL SECURITY INVOKER
+    RETURNS TEXT
+    DETERMINISTIC
+    SQL SECURITY INVOKER
 BEGIN
-  DECLARE output TEXT;
-  SET output = REPLACE(input, '|', '\\|');
-  RETURN output;
+    DECLARE output TEXT;
+    SET output = REPLACE(input, '|', '\\|');
+    RETURN output;
+END;
+
+###
+#
+# QCC(input)
+# replaces ':' (colon) and ',' (coma)  in `input` with '\:' and '\,'
+#
+DROP FUNCTION IF EXISTS QCC;
+CREATE FUNCTION QCC(input TEXT)
+    RETURNS TEXT
+    DETERMINISTIC
+    SQL SECURITY INVOKER
+BEGIN
+    DECLARE output TEXT;
+    SET output = REPLACE(REPLACE(input, ':', '\\:'), ',', '\\,');
+    RETURN output;
 END;
 
 ###
@@ -59,9 +75,9 @@ END;
 #
 DROP FUNCTION IF EXISTS QNL2BR;
 CREATE FUNCTION QNL2BR(input TEXT)
-  RETURNS TEXT
-  DETERMINISTIC
-  SQL SECURITY INVOKER
+    RETURNS TEXT
+    DETERMINISTIC
+    SQL SECURITY INVOKER
 BEGIN
   DECLARE output TEXT;
   SET output = REPLACE(REPLACE(input, CHAR(13), ''), CHAR(10), '<br>');