Bug 163890: editusers.cgi incorrectly treats "_" (underscore) as a wildcard

r/a=LpSolit

Bug 163890: editusers.cgi incorrectly treats "_" (underscore) as a wildcard
71c3a44e · Sunil Joshi · Frédéric Buclin · 0b816e82 · 71c3a44e
Commit 71c3a44e authored Oct 14, 2012 by Sunil Joshi Committed by Frédéric Buclin Oct 14, 2012
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 2 deletions

editusers.cgi editusers.cgi +1 -2

No files found.
--- a/editusers.cgi
+++ b/editusers.cgi
@@ -145,8 +145,7 @@ if ($action eq 'search') {
            } elsif ($matchtype eq 'exact') {
                $query .= $expr . ' = ?';
            } else { # substr or unknown
-                $query .= $dbh->sql_istrcmp($expr, '?', 'LIKE');
-                $matchstr = "%$matchstr%";
+                $query .= $dbh->sql_iposition('?', $expr) . ' > 0';
            }
            $nextCondition = 'AND';
            push(@bindValues, $matchstr);