Ticket #19292: sanitize_title.diff

wp-includes/post.php

@@ -3153 +3153 @@
         $page_path = str_replace('%20', ' ', $page_path);
         $parts = explode( '/', trim( $page_path, '/' ) );
         $parts = array_map( 'esc_sql', $parts );
-        $parts = array_map( 'sanitize_title', $parts );
+        $parts = array_map( 'sanitize_title_for_query', $parts );
 
         $in_string = "'". implode( "','", $parts ) . "'";
         $post_type_sql = $post_type;

wp-includes/query.php

@@ -1838 +1838 @@
                 }
 
                 if ( !empty($q['tag_slug__in']) ) {
-                        $q['tag_slug__in'] = array_map('sanitize_title', array_unique( (array) $q['tag_slug__in'] ) );
+                        $q['tag_slug__in'] = array_map('sanitize_title_for_query', array_unique( (array) $q['tag_slug__in'] ) );
                         $tax_query[] = array(
                                 'taxonomy' => 'post_tag',
                                 'terms' => $q['tag_slug__in'],
@@ -1847 +1847 @@
                 }
 
                 if ( !empty($q['tag_slug__and']) ) {
-                        $q['tag_slug__and'] = array_map('sanitize_title', array_unique( (array) $q['tag_slug__and'] ) );
+                        $q['tag_slug__and'] = array_map('sanitize_title_for_query', array_unique( (array) $q['tag_slug__and'] ) );
                         $tax_query[] = array(
                                 'taxonomy' => 'post_tag',
                                 'terms' => $q['tag_slug__and'],