Add db_rewrite_sql to respect users permissions for search results

Patch above does not work! I didnt test the patch above before posting it. Here is a tested version that works on my installation (lots of permissions with Content Access Module).

/**
 * Autocomplete callback
 *
 * @param mixed $delta
 *    Provides the unqiue ID for the block provided by this module
 * @param string $string
 *    The string to lookup
 */
function node_quick_find_autocomplete($delta = 0, $string = '') {
  $settings = variable_get('node_quick_find_'. $delta, array());

  $matches = array();
  if ($string) {
    $string = drupal_strtolower($string);
    if (empty($settings['node_types'])) {
      $db_rewrite_result = db_rewrite_sql('SELECT n.title FROM {node} n WHERE n.title LIKE "%s%%"');
      $result = db_query_range($db_rewrite_result, $string , 0, 10);
    }
    else {
      $db_rewrite_result = db_rewrite_sql('SELECT n.title FROM {node} n WHERE n.type IN('. db_placeholders($settings['node_types'], 'varchar') .') AND n.title LIKE "%s%%"');
      $result = db_query_range($db_rewrite_result, array_merge($settings['node_types'], array($string)) , 0, 10);
    }
    while ($node = db_fetch_object($result)) {
      $matches[$node->title] = check_plain($node->title);
    }
  }
  print drupal_to_js($matches);
  exit();
}

This patch is identical to the one above but also adds the feature (#415244: search any part of the title (not just beginnig)) to search within any part of the node title.

Apply the patch or replace the function node_quick_find_autocomplete() in function node_quick_find.module

/**
 * Autocomplete callback
 *
 * @param mixed $delta
 *    Provides the unqiue ID for the block provided by this module
 * @param string $string
 *    The string to lookup
 */
function node_quick_find_autocomplete($delta = 0, $string = '') {
  $settings = variable_get('node_quick_find_'. $delta, array());

  $matches = array();
  if ($string) {
    $string = drupal_strtolower($string);
    if (empty($settings['node_types'])) {
      $db_rewrite_result = db_rewrite_sql('SELECT n.title FROM {node} n WHERE n.title LIKE "%%%s%%"');
      $result = db_query_range($db_rewrite_result, $string , 0, 10);
    }
    else {
      $db_rewrite_result = db_rewrite_sql('SELECT n.title FROM {node} n WHERE n.type IN('. db_placeholders($settings['node_types'], 'varchar') .') AND n.title LIKE "%%%s%%"');
      $result = db_query_range($db_rewrite_result, array_merge($settings['node_types'], array($string)) , 0, 10);
    }
    while ($node = db_fetch_object($result)) {
      $matches[$node->title] = check_plain($node->title);
    }
  }
  print drupal_to_js($matches);
  exit();
}