feat: Ensure proper quoting of reverse search string in RecordSearch

poweradmin · Dec 2, 2023 · 2539b5d · 2539b5d
1 parent a209c96
commit 2539b5d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/Application/Query/RecordSearch.php b/lib/Application/Query/RecordSearch.php
@@ -88,7 +88,7 @@ public function fetchRecords(mixed $search_string, bool $reverse, mixed $reverse
             LEFT JOIN users u on z.owner = u.id
             WHERE
                 (records.name LIKE ' . $this->db->quote($search_string, 'text') . ' OR records.content LIKE ' . $this->db->quote($search_string, 'text') .
-            ($reverse ? ' OR records.name LIKE ' . $reverse_search_string . ' OR records.content LIKE ' . $reverse_search_string : '') . ')' .
+            ($reverse ? ' OR records.name LIKE ' . $this->db->quote($reverse_search_string, 'text') . ' OR records.content LIKE ' . $reverse_search_string : '') . ')' .
             ($permission_view == 'own' ? 'AND z.owner = ' . $this->db->quote($_SESSION['userid'], 'integer') : '') .
             ($iface_search_group_records ? ' GROUP BY records.name, records.content ' : '') .
             ' ORDER BY ' . $sort_records_by .