Ticket #20223: 20223.patch

wp-includes/wp-db.php

@@ -788 +788 @@
                 if ( $this->dbh && $this->real_escape )
                         return mysql_real_escape_string( $string, $this->dbh );
                 else
-                        return addslashes( $string );
+                        return strtr( $string, array(
+                                "\x00"  => '\x00',
+                                "\n"    => '\n',
+                                "\r"    => '\r',
+                                '\\'    => '\\\\',
+                                "'"     => "\'",
+                                '"'     => '\"',
+                                "\x1a"  => '\x1a'
+                        ) );
         }
 
         /**