Fix binding on searchableRaw

Power-Components · May 27, 2024 · fe82057 · fe82057
1 parent 71ba833
commit fe82057
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/DataSource/Builder.php b/src/DataSource/Builder.php
@@ -153,7 +153,7 @@ public function filterContains(): Builder
 
                         $query->when($search != '', function () use ($column, $query, $search, $table, $field, $hasColumn) {
                             if (($sqlRaw = strval(data_get($column, 'searchableRaw')))) {
-                                $query->orWhereRaw($sqlRaw . ' ' . Sql::like($query) . ' \'%' . $search . '%\'');
+                                $query->orWhereRaw($sqlRaw . ' ' . Sql::like($query) . ' ?', ["%{$search}%"]);
                             }
 
                             if ($hasColumn && blank(data_get($column, 'searchableRaw'))) {
@@ -164,7 +164,7 @@ public function filterContains(): Builder
                                     $driverName = $query->getConnection()->getConfig('driver');
 
                                     if ($columnType === 'json' && strtolower($driverName) !== 'pgsql') {
-                                        $query->orWhereRaw("LOWER(`{$table}`.`{$field}`)" . Sql::like($query) . "?", '%' . $search . '%');
+                                        $query->orWhereRaw("LOWER(`{$table}`.`{$field}`)" . Sql::like($query) . ' ?', ["%{$search}%"]);
                                     } else {
                                         $query->orWhere("{$table}.{$field}", Sql::like($query), "%{$search}%");
                                     }