scinote-eln/scinote-web
1
1
Fork 0
mirror of https://github.com/scinote-eln/scinote-web.git synced 2025-01-01 21:21:50 +08:00
Code Issues Projects Releases Packages Wiki Activity

filter search query for special chars [fixes SCI_74]

Browse source
This commit is contained in:
zmagod 2016-08-12 11:08:51 +02:00
parent 32699578ed
commit 6c7cfb4467
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
app/datatables/sample_datatable.rb
View file

@ -158,6 +158,7 @@ class SampleDatatable < AjaxDatatablesRails::Base
def fetch_records
records = get_raw_records
records = sort_records(records) if params[:order].present?
escape_special_chars
records = filter_records(records) if params[:search].present? && (not (sorting_by_custom_column))
records = paginate_records(records) if (not (params[:length].present? && params[:length] == '-1')) && (not (sorting_by_custom_column))
records
@ -284,4 +285,12 @@ class SampleDatatable < AjaxDatatablesRails::Base
params[:order].values[0]["column"].to_i > 6
end
# Escapes special characters in search query
def escape_special_chars
params[:search][:value] = ActiveRecord::Base
.send(:sanitize_sql_like,
params[:search][:value]) if params[:search]
.present?
end
end