From 2cdec74e8a1dd68f757ab89d64aeafac9e56d0ed Mon Sep 17 00:00:00 2001
From: Joas Schilling <nickvergessen@owncloud.com>
Date: Fri, 13 Nov 2015 10:33:33 +0100
Subject: [PATCH] Correctly escape the paths so we only display favorites
 instead of wildcards

---
 apps/files/lib/activity.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/files/lib/activity.php b/apps/files/lib/activity.php
index d473120b31f..c171b3bfabf 100644
--- a/apps/files/lib/activity.php
+++ b/apps/files/lib/activity.php
@@ -391,7 +391,7 @@ class Activity implements IExtension {
 			}
 			foreach ($favorites['folders'] as $favorite) {
 				$fileQueryList[] = '`file` LIKE ?';
-				$parameters[] = $favorite . '/%';
+				$parameters[] = \OC::$server->getDatabaseConnection()->escapeLikeParameter($favorite) . '/%';
 			}
 
 			return [
-- 
2.39.5