fix: bug (openemr#7551)

* fix: bug * typo * better fix
sjpadgett · Jul 10, 2024 · ee2bef8 · ee2bef8
1 parent 08b5625
commit ee2bef8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/interface/main/calendar/modules/PostCalendar/pnuser.php b/interface/main/calendar/modules/PostCalendar/pnuser.php
@@ -368,7 +368,7 @@ function postcalendar_user_search()
         // build our search query
         foreach ($keywords as $word) {
             if (!empty($sqlKeywords)) {
-                $sqlKeywords .= " $k_andor ";
+                $sqlKeywords .= " " . escape_identifier($k_andor, ['AND', 'OR'], true) . " ";
             }
 
             $sqlKeywords .= '(';