Escape ze string

This commit is contained in:
Mike Nolan 2025-01-01 06:34:56 +00:00
parent 6392799410
commit e8d9197b96
1 changed files with 2 additions and 2 deletions

View File

@ -31,8 +31,8 @@ if(isset($_GET["q"]))
}
$stmt = $pdo->prepare("select * from SavedVideo where Title like '%$search%' LIMIT ".strval($offset*20).", 20");
$mySearch = $pdo->quote("%".$search."%");
$stmt = $pdo->prepare("select * from SavedVideo where Title like $mySearch LIMIT ".strval($offset*20).", 20");
$stmt->execute();
$videos = $stmt->fetchAll();