From: Johan Cwiklinski <jcwiklinski@teclib.com>
Date: Sat, 30 Nov 2019 16:01:03 +0000 (+0100)
Subject: Search value was not quoted
X-Git-Tag: 0.9.3~2
X-Git-Url: https://git.agnieray.net/?a=commitdiff_plain;h=c019fded371188ba429ff290e4f427f1ede7e20a;p=galette.git

Search value was not quoted
---

diff --git a/galette/lib/Galette/Repository/Members.php b/galette/lib/Galette/Repository/Members.php
index 0d103ad9b..a7041a417 100644
--- a/galette/lib/Galette/Repository/Members.php
+++ b/galette/lib/Galette/Repository/Members.php
@@ -1354,7 +1354,7 @@ class Members
                             $field = 'field_val';
                             $qry .= 'LOWER(' . $prefix . $field . ') ' .
                                 $qop  . ' ' ;
-                            $select->where($qry . '%' .strtolower($cd) . '%');
+                            $select->where($qry . $zdb->platform->quoteValue('%' .strtolower($cd) . '%'));
                         }
                     }
                 }