mirror of
https://github.com/gosticks/wordpress-develop.git
synced 2026-08-11 20:30:23 +00:00
Fix potential SQLi through improper use of API functions.
git-svn-id: https://develop.svn.wordpress.org/trunk@24875 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
@@ -186,7 +186,7 @@ function get_bookmarks($args = '') {
|
||||
}
|
||||
|
||||
if ( ! empty($search) ) {
|
||||
$search = like_escape($search);
|
||||
$search = esc_sql( like_escape( $search ) );
|
||||
$search = " AND ( (link_url LIKE '%$search%') OR (link_name LIKE '%$search%') OR (link_description LIKE '%$search%') ) ";
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user