1
0
mirror of https://github.com/e107inc/e107.git synced 2025-07-30 19:30:25 +02:00

Filter on query.

This commit is contained in:
Cameron
2017-03-10 11:42:57 -08:00
parent 65e5d3b362
commit 392a4f1785

View File

@@ -616,7 +616,9 @@ function pm_user_lookup()
{
$sql = e107::getDb();
$query = "SELECT * FROM #user WHERE user_name REGEXP '^".$_POST['keyword']."' ";
$tp = e107::getParser();
$query = "SELECT * FROM #user WHERE user_name REGEXP '^".$tp->filter($_POST['keyword'],'w')."' ";
if($sql->gen($query))
{
echo '[';