mirror of
https://github.com/gosticks/wordpress-develop.git
synced 2026-08-11 20:30:23 +00:00
Replace all uses of like_escape() with $wpdb->esc_like().
Props miqrogroove. See #10041. git-svn-id: https://develop.svn.wordpress.org/trunk@28712 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
@@ -481,11 +481,11 @@ class WP_Comment_Query {
|
||||
* @return string
|
||||
*/
|
||||
protected function get_search_sql( $string, $cols ) {
|
||||
$string = esc_sql( like_escape( $string ) );
|
||||
global $wpdb;
|
||||
|
||||
$searches = array();
|
||||
foreach ( $cols as $col )
|
||||
$searches[] = "$col LIKE '%$string%'";
|
||||
$searches[] = $wpdb->prepare( "$col LIKE %s", $wpdb->esc_like( $string ) );
|
||||
|
||||
return ' AND (' . implode(' OR ', $searches) . ')';
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user