fixed #9028: Thingy fails when setting values containing single quotes

docs/changelog/7.x.x.txt

@@ -8,7 +8,7 @@
  - fixed #9025: Testing function of UsersOnline macro fails.
  - Brand new Survey system.  Make sure to export your old results as they will
    not be imported, only the surveys themselves.
-
+ - fixed #9028: Thingy fails when setting values containing single quotes
 
 7.6.2
  - fixed: not allowed to add calendar events if in can edit group but not can add event group

lib/WebGUI/Asset/Wobject/Thingy.pm

@@ -3009,7 +3009,8 @@ sequenceNumber');
                 "searchFields_is".$fieldType => 1,
             });
             my $searchValue = $session->form->process("field_".$field->{fieldId});
-            push(@constraints,$dbh->quote_identifier("field_".$field->{fieldId})." like '%".$searchValue."%'") if ($searchValue);
+            push @constraints, $dbh->quote_identifier("field_".$field->{fieldId}) . " LIKE "
+                . $dbh->quote('%'.$searchValue.'%') if ($searchValue);
         }
         if($field->{displayInSearch}){
             my $orderByUrl = $self->session->url->append($currentUrl,"orderBy=".$field->{fieldId});