Use named parameter instead of direct value for system tags search param (#25380)

2016-07-06 22:39:34 +02:00 · 2016-07-06 22:39:34 +02:00 · dc21a38a85
parent 21b5533b83
commit dc21a38a85
1 changed files with 1 additions and 1 deletions
--- a/lib/private/SystemTag/SystemTagManager.php
+++ b/lib/private/SystemTag/SystemTagManager.php
@ -142,7 +142,7 @@ class SystemTagManager implements ISystemTagManager {
 			$query->andWhere(
 				$query->expr()->like(
 					'name',
-					$query->expr()->literal('%' . $this->connection->escapeLikeParameter($nameSearchPattern). '%')
+					$query->createNamedParameter('%' . $this->connection->escapeLikeParameter($nameSearchPattern). '%')
 				)
 			);
 		}