diff --git a/libs/verysimple/Phreeze/CriteriaFilter.php b/libs/verysimple/Phreeze/CriteriaFilter.php
index <HASH>..<HASH> 100644
--- a/libs/verysimple/Phreeze/CriteriaFilter.php
+++ b/libs/verysimple/Phreeze/CriteriaFilter.php
@@ -51,7 +51,7 @@ class CriteriaFilter
 		foreach ($propertyNames as $propName)
 		{
 			$dbfield = $criteria->GetFieldFromProp($propName);
-			$where .= $orDelim . $dbfield ." like '". $criteria->Escape($this->Value) . "'";
+			$where .= $orDelim . $criteria->Escape($dbfield) ." like '". $criteria->Escape($this->Value) . "'";
 			$orDelim = ' or ';
 		}
 		$where .= ') ';
criteria filter now sql escapes column/property names