gocart/GoCart — pull request #96 by daneoshiga (2013-01-27 16:40:28+00:00)
Title: Using or_like active record method instead of sql clause

If someone searchs for ", it gives an mysql error, and potentially makes
possible a mysql injection

by the codeigniter documentation

$this->db->like('title', 'match');
$this->db->or_like('body', $match);
// WHERE title LIKE '%match%' OR body LIKE '%match%'