Changeset 16999 for trunk/wp-includes/taxonomy.php

Timestamp:

12/16/2010 02:22:41 PM (15 years ago)

Author:

ryan

Message:

Add like_escape() to some queries. fixes #15764

File:

• trunk/wp-includes/taxonomy.php (modified) (1 diff)

trunk/wp-includes/taxonomy.php

@@ -1238 +1238 @@
 
     if ( !empty($name__like) )
-        $where .= " AND t.name LIKE '{$name__like}%'";
+        $where .= " AND t.name LIKE '" . like_escape( $name__like ) . "%'";
 
     if ( '' !== $parent ) {