@@ -, +, @@ \ - 'Cordoba %' - 'Buenos Aires _' - 'London \' --- koha-tmpl/intranet-tmpl/prog/js/datatables.js | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) --- a/koha-tmpl/intranet-tmpl/prog/js/datatables.js +++ a/koha-tmpl/intranet-tmpl/prog/js/datatables.js @@ -556,8 +556,11 @@ jQuery.fn.dataTable.ext.errMode = function(settings, note, message) { _per_page: length }; - function build_query(col, value){ + + // escape SQL special characters + value = value.replace(/(\%|\_|\\)/g, "\\$1" ); + var parts = []; var attributes = col.data.split(':'); for (var i=0;i