vhad/wordpress-develop
1
0
Fork 0
mirror of https://github.com/gosticks/wordpress-develop.git synced 2026-08-11 20:30:23 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Use sanitize_key() instead of esc_sql() when 'escaping' variable DB field names. see #21767.

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@24714 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Andrew Nacin
2013-07-16 14:21:05 +00:00
parent 25708e95f1
commit 40623f1c68
3 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wp-includes/taxonomy.php
+1 -1
View File
@@ -791,7 +791,7 @@ class WP_Tax_Query {
if ( $query['field'] == $resulting_field )
return;
$resulting_field = esc_sql( $resulting_field );
$resulting_field = sanitize_key( $resulting_field );
switch ( $query['field'] ) {
case 'slug':