Changeset 11978 for trunk/wp-includes/query.php

Timestamp:

09/27/2009 05:33:56 AM (15 years ago)

Author:

markjaquith

Message:

esc_sql() for wp-includes

File:

• trunk/wp-includes/query.php (modified) (1 diff)

trunk/wp-includes/query.php

@@ -1757 +1757 @@
                 $searchand = ' AND ';
             }
-            $term = $wpdb->escape($q['s']);
+            $term = esc_sql($q['s']);
             if (empty($q['sentence']) && count($q['search_terms']) > 1 && $q['search_terms'][0] != $q['s'] )
                 $search .= " OR ($wpdb->posts.post_title LIKE '{$n}{$term}{$n}') OR ($wpdb->posts.post_content LIKE '{$n}{$term}{$n}')";