diff options
| author | Morris Jobke <hey@morrisjobke.de> | 2016-07-04 11:49:40 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2016-07-04 11:49:40 +0200 |
| commit | 152c1d414efcba73008af57e8ad1189979f5f3d5 (patch) | |
| tree | f0e1919bb932595140568d845cc7ee1a4b50e753 | |
| parent | 978ab660f737edbc38e7847f86e6106fb456dcb7 (diff) | |
| parent | dc5fea504b195cf1e36f9a129d1f77ce7c91de13 (diff) | |
| download | nextcloud-server-152c1d414efcba73008af57e8ad1189979f5f3d5.tar.gz nextcloud-server-152c1d414efcba73008af57e8ad1189979f5f3d5.zip | |
Merge pull request #299 from nextcloud/master-use-parameterized-query
[master] Use paramterized parameter for \OC\SystemTag\SystemTagManager
| -rw-r--r-- | lib/private/SystemTag/SystemTagManager.php | 5 |
1 files changed, 1 insertions, 4 deletions
diff --git a/lib/private/SystemTag/SystemTagManager.php b/lib/private/SystemTag/SystemTagManager.php index 2b0ef03e471..3e32582025f 100644 --- a/lib/private/SystemTag/SystemTagManager.php +++ b/lib/private/SystemTag/SystemTagManager.php @@ -140,10 +140,7 @@ class SystemTagManager implements ISystemTagManager { if (!empty($nameSearchPattern)) { $query->andWhere( - $query->expr()->like( - 'name', - $query->expr()->literal('%' . $this->connection->escapeLikeParameter($nameSearchPattern). '%') - ) + $query->expr()->like('name', $query->createNamedParameter('%' . $this->connection->escapeLikeParameter($nameSearchPattern) . '%')) ); } |