fix session API broken and SQL pretection

2014-11-04 11:37:15 -05:00
parent 69a98236bd
commit 0c5ba4573a
7 changed files with 5 additions and 12 deletions
--- a/models/repo.go
+++ b/models/repo.go
@ -1161,7 +1161,7 @@ func SearchRepositoryByName(opt SearchOption) (repos []*Repository, err error) {
 	if !opt.Private {
 		sess.And("is_private=false")
 	}
-	sess.And("lower_name like '%" + opt.Keyword + "%'").Find(&repos)
+	sess.And("lower_name like ?", "%"+opt.Keyword+"%").Find(&repos)
 	return repos, err
 }