quote characters used directly in a query

[xabbuh]

This fixes #26.

[javiereguiluz]

I have two comments about this change:

1. This line should be moved outside the foreach loop to not repeat it for each field.
2. I don't think that calling the quote() method is the right thing to do here. I've made some tests:

What the user typed in the search box	The result of quote()	The expected result
foo'	'foo\''	foo\'
%foo%	'%foo%'	\%foo\%

Keep in mind that the query is wrapped like this to do the full-text search: '%'.$searchQuery.'%' This means that it cannot be quoted, we just have to escape the special chars in the context of the LIKE query.

[xabbuh]

Indeed, you're right.

[Pierstoval]

Does adding $searchQuery = trim($searchQuery, "'"); seems a bad practice ?

[xabbuh]

I think that's not a good idea because we then relied on implementation specific behaviour.

[Pierstoval]

According to issue #26 the best solution might seem this one:

$wildcards = $this->getDoctrine()->getConnection()->getDatabasePlatform()->getWildcards();
if (!count($wildcards)) {
    $wildcards = array('%','_');
}
$wildcards = implode('', $wildcards);
$searchQuery = addcslashes($searchQuery,$wildcards);

[xabbuh]

I updated the code.

[javiereguiluz]

Thank you Christian! I appreciate the time you took to solve this PR and do all the asked code changes.