From f319329014f52d0e270f2c2a7a27329f87909241 Mon Sep 17 00:00:00 2001
From: Madhu S R <madhu.sr@vtigersolutions.com>
Date: Fri, 19 Apr 2024 11:12:59 +0530
Subject: [PATCH] Fixes: Added search parameters to the where condition for
 related records search in the popup modal

---
 modules/Vtiger/views/Popup.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/Vtiger/views/Popup.php b/modules/Vtiger/views/Popup.php
index c64ddc132..ae275249e 100644
--- a/modules/Vtiger/views/Popup.php
+++ b/modules/Vtiger/views/Popup.php
@@ -180,8 +180,8 @@ class Vtiger_Popup_View extends Vtiger_Footer_View {
 			foreach ($searchParams as $fieldListGroup) {
 				foreach ($fieldListGroup as $fieldSearchInfo) {
 					$fieldModel = $moduleFields[$fieldSearchInfo[0]];
-					$tableName = $fieldModel->get('table');
-					$column = $fieldModel->get('column');
+					$tableName = Vtiger_Util_Helper::validateStringForSql($fieldModel->get('table'));
+					$column = Vtiger_Util_Helper::validateStringForSql($fieldModel->get('column'));
 					$whereCondition[$fieldSearchInfo[0]] = array($tableName.'.'.$column, $fieldSearchInfo[1], $fieldSearchInfo[2]);
 				}
 			}
-- 
GitLab