From 6bb0f67f534f383933b74b57e16dffc368f1f967 Mon Sep 17 00:00:00 2001
From: stronk7 <stronk7>
Date: Tue, 31 Oct 2006 19:54:46 +0000
Subject: [PATCH] Prevent +/- operators (REGEXP) on course searches for MSSQL
 and Oracle. MDL-7312

Merged from MOODLE_17_STABLE
---
 lib/datalib.php | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/lib/datalib.php b/lib/datalib.php
index 877e2b1460..d27d93f465 100644
--- a/lib/datalib.php
+++ b/lib/datalib.php
@@ -717,6 +717,13 @@ function get_courses_search($searchterms, $sort='fullname ASC', $page=0, $record
     $summarysearch = '';
 
     foreach ($searchterms as $searchterm) {
+
+    /// Under Oracle and MSSQL, trim the + and - operators and perform
+    /// simpler LIKE search
+        if ($CFG->dbtype == 'oci8po' || $CFG->dbtype == 'mssql' || $CFG->dbtype == 'mssql_n' || $CFG->dbtype == 'odbc_mssql') {
+            $searchterm = trim($searchterm, '+-');
+        }
+
         if ($fullnamesearch) {
             $fullnamesearch .= ' AND ';
         }
-- 
2.39.5