From 92545b53a6277ea3d1f9e2f6a8a993f7656ec9bc Mon Sep 17 00:00:00 2001 From: Naomi Date: Tue, 22 Feb 2011 11:59:55 -0500 Subject: [PATCH] CC-1955 --- application/models/StoredFile.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/application/models/StoredFile.php b/application/models/StoredFile.php index 9190c48f1..de3778a1b 100644 --- a/application/models/StoredFile.php +++ b/application/models/StoredFile.php @@ -1836,8 +1836,8 @@ class StoredFile { $innerCond = array(); foreach($searchCols as $col) { - - $innerCond[] = "{$col}::text ILIKE '%{$term}%'"; + $escapedTerm = pg_escape_string($term); + $innerCond[] = "{$col}::text ILIKE '%{$escapedTerm}%'"; } $outerCond[] = "(".join(" OR ", $innerCond).")"; }