bweb: escape _ % for LIKE search

diff --git a/gui/bweb/cgi/bresto.pl b/gui/bweb/cgi/bresto.pl
index 662504f32c75e470f17d1115d139dd1611cdd9c2..9442a552cb1a4ff0791b3c1ec2cea407c9e8b5d7 100755 (executable)
--- a/gui/bweb/cgi/bresto.pl
+++ b/gui/bweb/cgi/bresto.pl
@@ -914,6 +914,7 @@ sub fill_table_for_restore
 
     foreach my $dirid (@dirid) {
         my $p = $bvfs->get_path($dirid);
+        $p =~ s/([%_\\])/\\$1/g;  # Escape % and _ for LIKE search
         $p = $bvfs->dbh_quote($p);
         push @union, "
   (SELECT File.JobId, File.FileIndex, File.FilenameId, File.PathId $FileId