Changeset 17997 for trunk/wp-includes/taxonomy.php

Timestamp:

05/22/2011 11:22:59 PM (13 years ago)

Author:

ryan

Message:

Prepare some LIKEs

File:

• trunk/wp-includes/taxonomy.php (modified) (2 diffs)

trunk/wp-includes/taxonomy.php

@@ -1285 +1285 @@
     }
 
-    if ( !empty($name__like) )
-        $where .= " AND t.name LIKE '" . like_escape( $name__like ) . "%'";
+    if ( !empty($name__like) ) {
+        $name__like = like_escape( $name__like );
+        $where .= $wpdb->prepare( " AND t.name LIKE %s", $name__like . '%' );
+    }
 
     if ( '' !== $parent ) {
@@ -1308 +1310 @@
     if ( !empty($search) ) {
         $search = like_escape($search);
-        $where .= " AND (t.name LIKE '%$search%')";
+        $where .= $wpdb->prepare( " AND (t.name LIKE %s)", '%' . $search . '%');
     }