fix invalid escaping of special characters for lookup

michiya · michiya · commit 07630b536570 · 2016-08-04T02:14:36.000+09:00
diff --git a/sql_server/pyodbc/base.py b/sql_server/pyodbc/base.py
@@ -124,7 +124,7 @@ class DatabaseWrapper(BaseDatabaseWrapper):
     #
     # Note: we use str.format() here for readability as '%' is used as a wildcard for
     # the LIKE operator.
-    pattern_esc = r"REPLACE(REPLACE(REPLACE({}, '\', '\\'), '%%', '\%%'), '_', '\_')"
+    pattern_esc = r"REPLACE(REPLACE(REPLACE({}, '\', '[\]'), '%%', '[%%]'), '_', '[_]')"
     pattern_ops = {
         'contains': "LIKE '%%' + {} + '%%'",
         'icontains': "LIKE '%%' + UPPER({}) + '%%'",

Original file line number	Diff line number	Diff line change
`@@ -124,7 +124,7 @@ class DatabaseWrapper(BaseDatabaseWrapper):`
`124`	`124`	`#`
`125`	`125`	`# Note: we use str.format() here for readability as '%' is used as a wildcard for`
`126`	`126`	`# the LIKE operator.`
`127`		`- pattern_esc = r"REPLACE(REPLACE(REPLACE({}, '\', '\\'), '%%', '\%%'), '_', '\_')"`
	`127`	`+ pattern_esc = r"REPLACE(REPLACE(REPLACE({}, '\', '[\]'), '%%', '[%%]'), '_', '[_]')"`
`128`	`128`	`pattern_ops = {`
`129`	`129`	`'contains': "LIKE '%%' + {} + '%%'",`
`130`	`130`	`'icontains': "LIKE '%%' + UPPER({}) + '%%'",`