Changeset 16999 for trunk/wp-includes/comment.php

Timestamp:

12/16/2010 02:22:41 PM (15 years ago)

Author:

ryan

Message:

Add like_escape() to some queries. fixes #15764

File:

• trunk/wp-includes/comment.php (modified) (1 diff)

trunk/wp-includes/comment.php

@@ -346 +346 @@
      */
     function get_search_sql( $string, $cols ) {
-        $string = esc_sql( $string );
+        $string = esc_sql( like_escape( $string ) );
 
         $searches = array();