[fusion-commits] r2957 - in branches/fusion-mg31: . widgets/Search

[svn_fusion at osgeo.org]

Author: jng
Date: 2016-09-19 08:49:19 -0700 (Mon, 19 Sep 2016)
New Revision: 2957

Modified:
   branches/fusion-mg31/
   branches/fusion-mg31/widgets/Search/Search.php
Log:
Merged revision(s) 2956 from trunk:
#652: Escape single-quotes in search input
........



Property changes on: branches/fusion-mg31
___________________________________________________________________
Modified: svn:mergeinfo
   - /branches/fusion-mg24:2560
/branches/fusion-mg26:2855,2869
/sandbox/adsk/2.6l:2911
/sandbox/adsk/3.1n:2925-2927
/sandbox/createruntimemap:2699-2708
/sandbox/jxlib-3.0:1957-2248
/sandbox/ol213:2801-2803
/sandbox/robust_error_handling:2818-2825
/sandbox/stamen:2873-2875
/sandbox/tiling:2845-2846
/trunk:2946,2950,2954
   + /branches/fusion-mg24:2560
/branches/fusion-mg26:2855,2869
/sandbox/adsk/2.6l:2911
/sandbox/adsk/3.1n:2925-2927
/sandbox/createruntimemap:2699-2708
/sandbox/jxlib-3.0:1957-2248
/sandbox/ol213:2801-2803
/sandbox/robust_error_handling:2818-2825
/sandbox/stamen:2873-2875
/sandbox/tiling:2845-2846
/trunk:2946,2950,2954,2956

Modified: branches/fusion-mg31/widgets/Search/Search.php
===================================================================
--- branches/fusion-mg31/widgets/Search/Search.php	2016-09-19 15:43:51 UTC (rev 2956)
+++ branches/fusion-mg31/widgets/Search/Search.php	2016-09-19 15:49:19 UTC (rev 2957)
@@ -86,6 +86,8 @@
         {
             trigger_error(FormatMessage("SEARCHLAYERNOTFOUND", $locale, array($layerName)));
         }
+        
+        $userInput = str_replace("'", "''", $userInput);
 
         //unescape strings
         //