mirror of
https://github.com/e107inc/e107.git
synced 2025-07-30 19:30:25 +02:00
Filter on query.
This commit is contained in:
@@ -616,7 +616,9 @@ function pm_user_lookup()
|
||||
{
|
||||
$sql = e107::getDb();
|
||||
|
||||
$query = "SELECT * FROM #user WHERE user_name REGEXP '^".$_POST['keyword']."' ";
|
||||
$tp = e107::getParser();
|
||||
|
||||
$query = "SELECT * FROM #user WHERE user_name REGEXP '^".$tp->filter($_POST['keyword'],'w')."' ";
|
||||
if($sql->gen($query))
|
||||
{
|
||||
echo '[';
|
||||
|
Reference in New Issue
Block a user