From 181ab7185a00a4f57d6a3468946766de320f010d Mon Sep 17 00:00:00 2001 From: Ryan Boren Date: Fri, 10 Dec 2010 15:57:48 +0000 Subject: [PATCH] like_escape() search string. see #15764 git-svn-id: https://develop.svn.wordpress.org/trunk@16858 602fd350-edb4-49c9-b593-d223f7449a82 --- wp-includes/user.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wp-includes/user.php b/wp-includes/user.php index d24c20b2d6..b28177fe6b 100644 --- a/wp-includes/user.php +++ b/wp-includes/user.php @@ -547,7 +547,7 @@ class WP_User_Query { if ( 'ID' == $col ) $searches[] = "$col = '$string'"; else - $searches[] = "$col LIKE '$string$wild_char'"; + $searches[] = "$col LIKE '" . like_escape($string) . "$wild_char'"; } return ' AND (' . implode(' OR ', $searches) . ')';