clean taxon string before using it in getTaxonWhereFrag string in set…

…SqlWhere
BioKIC · Jun 24, 2024 · 6250abd · 6250abd
1 parent 773a686
commit 6250abd
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/classes/OccurrenceTaxaManager.php b/classes/OccurrenceTaxaManager.php
@@ -227,6 +227,7 @@ public function getTaxonWhereFrag(){
 			$tidInArr = array();
 			$taxonType = $this->taxaArr['taxontype'];
 			foreach($this->taxaArr['taxa'] as $searchTaxon => $searchArr){
+				$cleanedSearchTaxon = $this->cleanInStr($searchTaxon);
 				if(isset($searchArr['taxontype'])) $taxonType = $searchArr['taxontype'];
 				if($taxonType == TaxaSearchType::TAXONOMIC_GROUP){
 					//Class, order, or other higher rank
@@ -251,10 +252,10 @@ public function getTaxonWhereFrag(){
 					//$sqlWhereTaxa .= 'OR (((ts.family = "'.$searchTaxon.'") AND (ts.taxauthid = '.$this->taxAuthId.')) OR o.sciname = "'.$searchTaxon.'") ';
 					if(isset($searchArr['tid'])){
 						$tidArr = array_keys($searchArr['tid']);
-						$sqlWhereTaxa .= 'OR ((ts.family = "'.$searchTaxon.'") OR (ts.tid IN('.implode(',', $tidArr).'))) ';
+						$sqlWhereTaxa .= 'OR ((ts.family = "'.$cleanedSearchTaxon.'") OR (ts.tid IN('.implode(',', $tidArr).'))) ';
 					}
 					else{
-						$sqlWhereTaxa .= 'OR ((o.family = "'.$searchTaxon.'") OR (o.sciname = "'.$searchTaxon.'")) ';
+						$sqlWhereTaxa .= 'OR ((o.family = "'.$cleanedSearchTaxon.'") OR (o.sciname = "'.$cleanedSearchTaxon.'")) ';
 					}
 				}
 				else{