Bug 163890: editusers.cgi incorrectly treats "_" (underscore) as a wildcard

r/a=LpSolit

diff --git a/editusers.cgi b/editusers.cgi
index e2675921bdc0c1689ff471df2f8f9ad76b8bba33..4fca85daa05faa89e03ddcb1e9bd260a234958e8 100755 (executable)
--- a/editusers.cgi
+++ b/editusers.cgi
@@ -145,8 +145,7 @@ if ($action eq 'search') {
             } elsif ($matchtype eq 'exact') {
                 $query .= $expr . ' = ?';
             } else { # substr or unknown
-                $query .= $dbh->sql_istrcmp($expr, '?', 'LIKE');
-                $matchstr = "%$matchstr%";
+                $query .= $dbh->sql_iposition('?', $expr) . ' > 0';
             }
             $nextCondition = 'AND';
             push(@bindValues, $matchstr);