FIX SQL injection

2017-09-06 18:17:57 +02:00
parent 032f54dd1a
commit 33e2179b65
7 changed files with 27 additions and 32 deletions
--- a/htdocs/core/lib/functions.lib.php
+++ b/htdocs/core/lib/functions.lib.php
@@ -6199,6 +6199,8 @@ function natural_search($fields, $value, $mode=0, $nofirstand=0)
 {
    global $db,$langs;

+    $value=trim($value);
+
    if ($mode == 0)
    {
    	$value=preg_replace('/\*/','%',$value);	// Replace * with %