From 6de72cbbfec4883dec23da4b59cbb1b4b82faf29 Mon Sep 17 00:00:00 2001 From: Domas Mituzas Date: Tue, 9 Aug 2005 13:25:42 +0000 Subject: [PATCH] add escaping routines for LIKE: db::escapeLike($s) --- includes/Database.php | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/includes/Database.php b/includes/Database.php index 8d1e37da61..543d4caf65 100644 --- a/includes/Database.php +++ b/includes/Database.php @@ -1128,6 +1128,15 @@ class Database { } } + /** + * Escape string for safe LIKE usage + */ + function escapeLike( $s ) { + $s=$this->strencode( $s ); + $s=str_replace(array('%','_'),array('\%','\_'),$s); + return $s; + } + /** * Returns an appropriately quoted sequence value for inserting a new row. * MySQL has autoincrement fields, so this is just NULL. But the PostgreSQL -- 2.20.1