Fix to custom filter (via module/event) that allowed searches to bypa…

…ss filter (#4319)

interface/main/finder/dynamic_finder_ajax.php

@@ -185,7 +185,7 @@
 if (empty($where)) {
     $where = $customWhere;
 } else {
-    $where = "$customWhere AND $where";
+    $where = "$customWhere AND ( $where )";
 }
 $row = sqlQuery("SELECT COUNT(id) AS count FROM patient_data WHERE $where", $srch_bind);
 $iFilteredTotal = $row['count'];