claunia/qemudb
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Escape input in searchForApplication()

Browse Source
This commit is contained in:
Alexander Nicolaysen Sørnes
2008-06-18 00:19:28 +02:00
committed by Chris Morgan
parent 88c098c83f
commit e646626c4a
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
include/util.php
View File

@@ -462,12 +462,12 @@ function searchForApplication($search_words)
FROM appFamily FROM appFamily
WHERE appName != 'NONAME' WHERE appName != 'NONAME'
AND appFamily.state = 'accepted' AND appFamily.state = 'accepted'
AND (appName LIKE '%" . $search_words . "%' AND (appName LIKE '%?%'
OR keywords LIKE '%" . $search_words . "%'"; OR keywords LIKE '%?%'";
$sQuery.=" ) ORDER BY appName"; $sQuery.=" ) ORDER BY appName";
$hResult = query_appdb($sQuery); $hResult = query_parameters($sQuery, $search_words, $search_words);
return $hResult; return $hResult;
} }