Merge pull request #298 from nextcloud/use-parameterized-query

[stable9] Use paramterized parameter for \OC\SystemTag\SystemTagManager
nextcloud · Jul 4, 2016 · dd8af5c · dd8af5c
2 parents 42d8ef5 + ce70ea3
commit dd8af5c
Showing 1 changed file with 1 addition and 4 deletions.
diff --git a/lib/private/systemtag/systemtagmanager.php b/lib/private/systemtag/systemtagmanager.php
@@ -124,10 +124,7 @@ public function getAllTags($visibilityFilter = null, $nameSearchPattern = null)
 
 		if (!empty($nameSearchPattern)) {
 			$query->andWhere(
-				$query->expr()->like(
-					'name',
-					$query->expr()->literal('%' . $this->connection->escapeLikeParameter($nameSearchPattern). '%')
-				)
+				$query->expr()->like('name', $query->createNamedParameter('%' . $this->connection->escapeLikeParameter($nameSearchPattern) . '%'))
 			);
 		}