Merge pull request from GHSA-vjph-r677-6pcc

Cacti · Apr 7, 2024 · fd93c6e · fd93c6e
1 parent f946fa5
commit fd93c6e
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/lib/api_automation.php b/lib/api_automation.php
@@ -1804,7 +1804,7 @@ function build_graph_object_sql_having($rule, $filter) {
 			$i = 0;
 
 			foreach ($field_names as $column) {
-				$sql_having .= ($i == 0 ? '':' OR ') . '`' . implode('`.`', explode('.', $column['field_name'])) . '`' . ' LIKE "%' . $filter . '%"';
+				$sql_having .= ($i == 0 ? '':' OR ') . '`' . implode('`.`', explode('.', $column['field_name'])) . '`' . ' LIKE ' . db_qstr('%' . $filter . '%');
 				$i++;
 			}
 
@@ -5406,4 +5406,3 @@ function automation_validate_import_columns($table, &$data, &$debug_data) {
 
 	return true;
 }
-