Wiki: correct behaviour in Postgres with pages that have ' in name

diff --git a/mod/wiki/ewikimoodlelib.php b/mod/wiki/ewikimoodlelib.php
index 1ab26bfa9321dc62d04f17f0a33e13d4d3602ed0..b2cb2d2e586a001f737f287f02794ade699713b0 100644 (file)
--- a/mod/wiki/ewikimoodlelib.php
+++ b/mod/wiki/ewikimoodlelib.php
@@ -240,7 +240,7 @@ function ewiki_database_moodle($action, &$args, $sw1, $sw2) {
                 $sql= "SELECT pagename AS id, version, flags" .
                     (EWIKI_DBQUERY_BUFFER && ($field!="pagename") ? ", $field" : "") .
                     " FROM " . $CFG->prefix.EWIKI_DB_TABLE_NAME .
-                    " WHERE $field ILIKE '%".$content."%'  and wiki=".$wiki_entry->id .
+                    " WHERE $field ILIKE '%".anydb_escape_string($content)."%'  and wiki=".$wiki_entry->id .
                     " GROUP BY id, pagename, version, flags ".  
                     (EWIKI_DBQUERY_BUFFER && ($field!="pagename") ? ", $field" : "") ;
                 break;