admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

replace FormatString by sql_string

Browse source
This commit is contained in:
Dany De Bontridder 2011-10-29 14:46:13 +00:00
parent 5ce3691f12
commit 733883f2eb
38 changed files with 94 additions and 99 deletions
Download patch file Download diff file Expand all files Collapse all files

6
include/action.common.inc.php
View file

@ -368,9 +368,9 @@ function ShowActionList($cn,$p_base)
if ( isset($_REQUEST['query']) )
{
// if a query is request build the sql stmt
$query="and (ag_title ~* '".FormatString($_REQUEST['query'])."' ".
"or ag_ref ='".trim(FormatString($_REQUEST['query'])).
"' or ag_comment ~* '".trim(FormatString($_REQUEST['query']))."'".
$query="and (ag_title ~* '".sql_string($_REQUEST['query'])."' ".
"or ag_ref ='".trim(sql_string($_REQUEST['query'])).
"' or ag_comment ~* '".trim(sql_string($_REQUEST['query']))."'".
")";
}