Merge pull request #2 from TomoTsuyuki/fix-issue62-apostrophe

Fix issue 62 Error with apostrophe
catalyst · May 5, 2022 · 0e66a15 · 0e66a15
2 parents f63cf94 + 5af1c59
commit 0e66a15
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/components/filters/fuserfield/plugin.class.php b/components/filters/fuserfield/plugin.class.php
@@ -178,7 +178,8 @@ private function sql_replace($filtersearchtext, $filterstrmatch, $finalelements)
                 print_error('nosuchoperator');
             }
             if ($operator == '~') {
-                $replace = " AND " . $field . " LIKE '%" . $filtersearchtext . "%'";
+                $searchitem = trim(str_replace("'", "''", $filtersearchtext));
+                $replace = " AND " . $field . " LIKE '%" . $searchitem . "%'";
             } else if ($operator == 'in') {
                 $processeditems = array();
                 // Accept comma-separated values, allowing for '\,' as a literal comma.

diff --git a/components/filters/searchtext/plugin.class.php b/components/filters/searchtext/plugin.class.php
@@ -87,7 +87,8 @@ private function sql_replace($filtersearchtext, $filterstrmatch, $finalelements)
                 print_error('nosuchoperator');
             }
             if ($operator == '~') {
-                $replace = " AND " . $field . " LIKE '%" . $filtersearchtext . "%'";
+                $searchitem = trim(str_replace("'", "''", $filtersearchtext));
+                $replace = " AND " . $field . " LIKE '%" . $searchitem . "%'";
             } else if ($operator == 'in') {
                 $processeditems = array();
                 // Accept comma-separated values, allowing for '\,' as a literal comma.