Extra column check needs to be escaped

This commit is contained in:
Nathan Gray 2010-04-01 20:19:28 +00:00
parent fa6c1d4a9c
commit 4b134dfc9e

View File

@ -1164,7 +1164,7 @@ class so_sql
// OR extra column on the end so a null or blank won't block a hit in the main columns
if ($extra_col)
{
$result .= (strlen($result) ? ' OR ' : ' ') . "$extra_col = $pattern";
$result .= (strlen($result) ? ' OR ' : ' ') . "$extra_col = " . $GLOBALS['egw']->db->quote($pattern);
}
$op = 'OR';