mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #299 from nextcloud/master-use-parameterized-query 

[master] Use paramterized parameter for \OC\SystemTag\SystemTagManager
This commit is contained in:
Morris Jobke 2016-07-04 11:49:40 +02:00 committed by GitHub
parent 978ab660f7 dc5fea504b
commit 152c1d414e
1 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/private/SystemTag/SystemTagManager.php
View File

@ -140,10 +140,7 @@ class SystemTagManager implements ISystemTagManager {
if (!empty($nameSearchPattern)) {
$query->andWhere(
$query->expr()->like(
'name',
$query->expr()->literal('%' . $this->connection->escapeLikeParameter($nameSearchPattern). '%')
)
$query->expr()->like('name', $query->createNamedParameter('%' . $this->connection->escapeLikeParameter($nameSearchPattern) . '%'))
);
}