Merge branch '3042-Punto-de-inyeccion-sql' into 'develop'

avoid sql injection in visual_map_get_user_layouts function

See merge request artica/pandorafms!1951

Former-commit-id: cd680e3a3df45f6f54c6c2f25d118f97f30b8b81

pandora_console/include/functions_visual_map.php

@@ -3465,7 +3465,9 @@ function visual_map_get_user_layouts ($id_user = 0, $only_names = false, $filter
 		$filter = array ();
 	} else {
 		if(!empty($filter['name'])){
-			$where .= "name LIKE '%".io_safe_output($filter['name'])."%'";
+			$where .= sprintf("name LIKE '%%%s%%'",
+            	db_escape_string_sql(io_safe_output($filter['name'])));
+
 			unset($filter['name']);
 		}
 	}