From 9ef291e6baf4120d3d5c290f2c59e6c65437a0e4 Mon Sep 17 00:00:00 2001
From: lyt <lyt@hainatravel.com>
Date: Tue, 27 Aug 2019 11:26:19 +0800
Subject: [PATCH] =?UTF-8?q?feat:=20PayPal=E5=8C=B9=E9=85=8DTrippest?=
 =?UTF-8?q?=E8=AE=A2=E5=8D=95:=20=E5=A2=9E=E5=8A=A0=E5=A4=96=E9=83=A8?=
 =?UTF-8?q?=E8=AE=A2=E5=8D=95=E5=92=8CHT=E8=AE=A2=E5=8D=95=E5=8F=B7:?=
 =?UTF-8?q?=E5=A4=9A=E5=AF=B9=E4=B8=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 webht/third_party/paypal/models/paypal_model.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webht/third_party/paypal/models/paypal_model.php b/webht/third_party/paypal/models/paypal_model.php
index 65b49d4a..93d9212e 100644
--- a/webht/third_party/paypal/models/paypal_model.php
+++ b/webht/third_party/paypal/models/paypal_model.php
@@ -610,7 +610,7 @@ class Paypal_model extends CI_Model {
     {
         $sql = "SELECT top 1 * from BIZ_ConfirmLineInfo
                 WHERE 1=1 ";
-        $tp_order ? $sql.=" and COLI_PriceMemo='$tp_order' " : "";
+        $tp_order ? $sql.=" and COLI_PriceMemo like '%" . $this->HT->escape_str($tp_order) . "%' " : "";
         $real_orderid ? $sql.=" and COLI_ID='$real_orderid' " : "";
         return $this->HT->query($sql)->row();
     }