Ticket #10041: 10041.3.diff

wp-includes/taxonomy.php

@@ -866 +866 @@
         }
 
         if ( !empty($search) ) {
-                $search = like_escape($search);
+                $search = like_escape(stripslashes($search));
                 $where .= " AND (t.name LIKE '%$search%')";
         }
 

wp-includes/bookmark.php

@@ -181 +181 @@
         }
 
         if ( ! empty($search) ) {
-                $search = like_escape($search);
+                $search = like_escape(stripslashes($search));
                 $search = " AND ( (link_url LIKE '%$search%') OR (link_name LIKE '%$search%') OR (link_description LIKE '%$search%') ) ";
         }
 

wp-includes/formatting.php

@@ -2329 +2329 @@
  * @return string text, safe for inclusion in LIKE query.
  */
 function like_escape($text) {
-        return str_replace(array("%", "_"), array("\\%", "\\_"), $text);
+        return esc_sql(addcslashes($text, '_%\\'));
 }
 
 /**