Changeset 13357

Timestamp:

02/24/2010 05:30:34 AM (15 years ago)

Author:

ryan

Message:

Don't quote escaped strings. Props dd32. see #11608

File:

• trunk/wp-includes/wp-db.php (modified) (1 diff)

trunk/wp-includes/wp-db.php

@@ -865 +865 @@
         $query = str_replace( "'%s'", '%s', $query ); // in case someone mistakenly already singlequoted it
         $query = str_replace( '"%s"', '%s', $query ); // doublequote unquoting
-        $query = str_replace( '%s', "'%s'", $query ); // quote the strings
+        $query = preg_replace('|(?<!%)%s|', "'%s'", $query); // quote the strings, avoiding escaped strings like %%s
         array_walk( $args, array( &$this, 'escape_by_ref' ) );
         return @vsprintf( $query, $args );