Merge pull request #211 from TomoTsuyuki/fix-issue62-apostrophe

Fix issue #62 Error with apostrophe
jleyva · Oct 3, 2024 · 09ccd7f · 09ccd7f
2 parents 4fa58a5 + 35a45ef
commit 09ccd7f
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/components/filters/fuserfield/plugin.class.php b/components/filters/fuserfield/plugin.class.php
@@ -236,7 +236,8 @@ private function sql_replace(string $filtersearchtext, $filterstrmatch, $finalel
             }
             if ($operator === '~') {
                 // TODO can be improved by more native PDO approach.
-                $replace = " AND " . $field . " LIKE '%" . $filtersearchtext . "%'";
+                $searchitem = trim(str_replace("'", "''", $filtersearchtext));
+                $replace = " AND " . $field . " LIKE '%" . $searchitem . "%'";
             } else if ($operator === 'in') {
                 $processeditems = [];
 

diff --git a/components/filters/searchtext/plugin.class.php b/components/filters/searchtext/plugin.class.php
@@ -135,7 +135,8 @@ private function sql_replace($filtersearchtext, $filterstrmatch, $finalelements)
             }
 
             if ($operator === '~') {
-                $replace = " AND " . $field . " LIKE '%" . $filtersearchtext . "%'";
+                $searchitem = trim(str_replace("'", "''", $filtersearchtext));
+                $replace = " AND " . $field . " LIKE '%" . $searchitem . "%'";
             } else if ($operator === 'in') {
                 $processeditems = [];
                 // Accept comma-separated values, allowing for '\,' as a literal comma.