slugs query updated to prevent SQL Injection - @sergio91pt

bpocallaghan · Nov 28, 2017 · 85ae5cb · 85ae5cb
1 parent 29b0599
commit 85ae5cb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/HasSlug.php b/src/HasSlug.php
@@ -169,7 +169,7 @@ protected function makeSlugUnique($slug)
      */
     protected function getExistingSlugs($slug)
     {
-        return static::whereRaw("{$this->slugOptions->slugField} LIKE '$slug%'")
+        return static::where($this->slugOptions->slugField, 'LIKE', "{$slug}%")
             ->withoutGlobalScopes()// ignore scopes
             ->withTrashed()// trashed, when entry gets activated again
             ->orderBy($this->slugOptions->slugField)