diff --git a/apps/user_ldap/lib/Group_LDAP.php b/apps/user_ldap/lib/Group_LDAP.php index 233077c99f353..34ba301fd00e8 100644 --- a/apps/user_ldap/lib/Group_LDAP.php +++ b/apps/user_ldap/lib/Group_LDAP.php @@ -201,7 +201,7 @@ public function getDynamicGroupMembers($dnGroup) { $pos = strpos($memberURLs[0], '('); if ($pos !== false) { $memberUrlFilter = substr($memberURLs[0], $pos); - $foundMembers = $this->access->searchUsers($memberUrlFilter, 'dn'); + $foundMembers = $this->access->searchUsers($memberUrlFilter, ['dn']); $dynamicMembers = []; foreach ($foundMembers as $value) { $dynamicMembers[$value['dn'][0]] = 1; @@ -1076,6 +1076,7 @@ public function getGroups($search = '', $limit = -1, $offset = 0) { if (!$this->enabled) { return []; } + $search = $this->access->escapeFilterPart($search, true); $cacheKey = 'getGroups-' . $search . '-' . $limit . '-' . $offset; //Check cache before driving unnecessary searches