server/search: fix underscores and percentages

Escape them for LIKE statements.
2016-09-26 21:56:19 +02:00 · 2016-09-26 21:56:19 +02:00 · 0e31e1fd14
commit 0e31e1fd14
parent 71a4ce8764
1 changed files with 4 additions and 1 deletions
--- a/server/szurubooru/search/configs/util.py
+++ b/server/szurubooru/search/configs/util.py
@ -5,7 +5,10 @@ from szurubooru.search import criteria


 def wildcard_transformer(value):
-    return value.replace('*', '%')
+    return (value
+        .replace('%', r'\%')
+        .replace('_', r'\_')
+        .replace('*', '%'))


 def apply_num_criterion_to_column(column, criterion):