Ticket #11605: 11605.5.patch

wp-includes/wp-db.php

@@ -469 +469 @@
                 }
         }
 
-        function _weak_escape($string) {
-                return addslashes($string);
-        }
-
         function _real_escape($string) {
                 if ( $this->dbh && $this->real_escape )
                         return mysql_real_escape_string( $string, $this->dbh );
@@ -503 +499 @@
          * @param string|array $data
          * @return string query safe string
          */
-        function escape($data) {
-                if ( is_array($data) ) {
-                        foreach ( (array) $data as $k => $v ) {
-                                if ( is_array($v) )
-                                        $data[$k] = $this->escape( $v );
-                                else
-                                        $data[$k] = $this->_weak_escape( $v );
-                        }
-                } else {
-                        $data = $this->_weak_escape( $data );
-                }
-
-                return $data;
+        function escape( $data ) {
+                if ( is_array ( $data ) )
+                        return array_map( array( &$this, 'escape' ), $data );
+                        
+                return addslashes( $data );
         }
 
         /**