Escape regular expression characters in search string

2025-09-02 02:12:37 +02:00 · 2020-01-05 20:45:18 -07:00
parent 1ae2dcb7cd
commit c0e901a90a
1 changed files with 3 additions and 1 deletions
--- a/app/Controllers/DirectoryController.php
+++ b/app/Controllers/DirectoryController.php
@@ -58,7 +58,9 @@ class DirectoryController
        }

        if ($search = $request->getQueryParams()['search'] ?? false) {
-            $files->name(sprintf('/(?:.*)%s(?:.*)/i', $search));
+            $files->name(
+                sprintf('/(?:.*)%s(?:.*)/i', preg_quote($search, '/'))
+            );
        } else {
            $files->depth(0);
        }