Fix issue 62 Error with apostrophe

catalyst · Apr 29, 2022 · 5af1c59 · 5af1c59
1 parent f63cf94
commit 5af1c59
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/components/filters/fuserfield/plugin.class.php b/components/filters/fuserfield/plugin.class.php
@@ -178,7 +178,8 @@ private function sql_replace($filtersearchtext, $filterstrmatch, $finalelements)
                 print_error('nosuchoperator');
             }
             if ($operator == '~') {
-                $replace = " AND " . $field . " LIKE '%" . $filtersearchtext . "%'";
+                $searchitem = trim(str_replace("'", "''", $filtersearchtext));
+                $replace = " AND " . $field . " LIKE '%" . $searchitem . "%'";
             } else if ($operator == 'in') {
                 $processeditems = array();
                 // Accept comma-separated values, allowing for '\,' as a literal comma.

diff --git a/components/filters/searchtext/plugin.class.php b/components/filters/searchtext/plugin.class.php
@@ -87,7 +87,8 @@ private function sql_replace($filtersearchtext, $filterstrmatch, $finalelements)
                 print_error('nosuchoperator');
             }
             if ($operator == '~') {
-                $replace = " AND " . $field . " LIKE '%" . $filtersearchtext . "%'";
+                $searchitem = trim(str_replace("'", "''", $filtersearchtext));
+                $replace = " AND " . $field . " LIKE '%" . $searchitem . "%'";
             } else if ($operator == 'in') {
                 $processeditems = array();
                 // Accept comma-separated values, allowing for '\,' as a literal comma.