Fix: add escape
This commit is contained in:
parent
edb6195cc2
commit
62f170d3d7
@ -878,7 +878,7 @@ class Societe extends CommonObject
|
||||
if ($similar)
|
||||
{
|
||||
// For test similitude
|
||||
$sql.= "(LOCATE('".$name."', nom) > 0 OR LOCATE(nom, '".$name."') > 0)";
|
||||
$sql.= "(LOCATE('".$this->db->escape($name)."', nom) > 0 OR LOCATE(nom, '".$this->db->escape($name)."') > 0)";
|
||||
}
|
||||
else
|
||||
{
|
||||
|
||||
Loading…
Reference in New Issue
Block a user