Sanitize single-quotes in search queries

Este commit está contenido en:
JustOff
2018-10-14 14:02:41 +03:00
padre 2dd8bede0f
commit afd01dc2d7

Ver fichero

@@ -99,7 +99,7 @@ let List = {
} }
if (search != "") { if (search != "") {
cq1 += ""; cq1 += "";
cq2 += "addons.name LIKE '%" + search + "%' AND "; cq2 += "addons.name LIKE '%" + search.replace(/'/g, "_") + "%' AND ";
} else { } else {
cq1 += ""; cq2 += "1 AND "; cq1 += ""; cq2 += "1 AND ";
} }