should probably escape that query, huh...

dnephin · Jul 30, 2013 · 77be14f · 77be14f
1 parent b4c1842
commit 77be14f
Showing 1 changed file with 7 additions and 6 deletions.
diff --git a/tracadvsearch/backend.py b/tracadvsearch/backend.py
@@ -101,14 +101,15 @@ def query_backend(self, criteria):
 
 		# distribute our search query to several fields
 		if 'q' in criteria:
+			q = self.escape(criteria['q'])
 			field_parts = []
-			field_parts.append('token_text:(%(q)s)' % criteria)
-			field_parts.append('name:(%(q)s)^3' % criteria)
-			field_parts.append('component:(%(q)s)^0.1' % criteria)
-			field_parts.append('milestone:(%(q)s)^0.1' % criteria)
-			field_parts.append('keywords:(%(q)s)^0.1' % criteria)
+			field_parts.append('text:(%s)' % q)
+			field_parts.append('name:(%s)^3' % q)
+			field_parts.append('component:(%s)^0.1' % q)
+			field_parts.append('milestone:(%s)^0.1' % q)
+			field_parts.append('keywords:(%s)^0.1' % q)
 			# include only digits, but preserve whitespace
-			digit_query = re.sub('[^0-9 ]', '', criteria['q']).strip()
+			digit_query = re.sub('[^0-9 ]', '', q).strip()
 			if digit_query:
 				field_parts.append('ticket_id:(%s)' % digit_query)