escape variation_text

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@5310 20353a03-c40f-0410-a6d1-a30d3c3de9de

bt5/erp5_trade/SkinTemplateItem/portal_skins/erp5_trade/Movement_zGetPackedQuantity.xml

@@ -57,9 +57,9 @@
                         <key> <string>_keys</string> </key>
                         <value>
                           <list>
-                            <string>explanation_uid</string>
-                            <string>resource_uid</string>
-                            <string>variation_text</string>
+<string>explanation_uid</string>
+<string>resource_uid</string>
+<string>variation_text</string>
                           </list>
                         </value>
                     </item>
@@ -139,7 +139,7 @@ WHERE\n
   AND movement.resource_uid = <dtml-sqlvar resource_uid type="int">\n
 </dtml-if>\n
 <dtml-if variation_text>\n
-  AND movement.variation_text = "<dtml-var variation_text>"\n
+  AND movement.variation_text = <dtml-sqlvar variation_text type="string">\n
 </dtml-if>\n
 
 
@@ -194,7 +194,7 @@ WHERE\n
   AND movement.resource_uid = <dtml-sqlvar resource_uid type="int">\n
 </dtml-if>\n
 <dtml-if variation_text>\n
-  AND movement.variation_text = "<dtml-var variation_text>"\n
+  AND movement.variation_text = <dtml-sqlvar variation_text type="string">\n
 </dtml-if>\n