Fix: add escape

This commit is contained in:
Regis Houssin 2012-10-09 20:23:02 +02:00
parent edb6195cc2
commit 62f170d3d7

View File

@ -878,7 +878,7 @@ class Societe extends CommonObject
if ($similar)
{
// For test similitude
$sql.= "(LOCATE('".$name."', nom) > 0 OR LOCATE(nom, '".$name."') > 0)";
$sql.= "(LOCATE('".$this->db->escape($name)."', nom) > 0 OR LOCATE(nom, '".$this->db->escape($name)."') > 0)";
}
else
{