Changeset 11978 for trunk/wp-includes/post.php

Timestamp:

09/27/2009 05:33:56 AM (15 years ago)

Author:

markjaquith

Message:

esc_sql() for wp-includes

File:

• trunk/wp-includes/post.php (modified) (1 diff)

trunk/wp-includes/post.php

@@ -1753 +1753 @@
         // Page slugs must be unique within their own trees.  Pages are in a
         // separate namespace than posts so page slugs are allowed to overlap post slugs.
-        $check_sql = "SELECT post_name FROM $wpdb->posts WHERE post_name = %s AND post_type IN ( '" . implode("', '", $wpdb->escape($hierarchical_post_types)) . "' ) AND ID != %d AND post_parent = %d LIMIT 1";
+        $check_sql = "SELECT post_name FROM $wpdb->posts WHERE post_name = %s AND post_type IN ( '" . implode("', '", esc_sql($hierarchical_post_types)) . "' ) AND ID != %d AND post_parent = %d LIMIT 1";
         $post_name_check = $wpdb->get_var($wpdb->prepare($check_sql, $slug, $post_ID, $post_parent));