Changeset 24875 for trunk/wp-includes/bookmark.php

Timestamp:

07/29/2013 06:16:47 PM (11 years ago)

Author:

duck_

Message:

Fix potential SQLi through improper use of API functions.

File:

• trunk/wp-includes/bookmark.php (modified) (1 diff)

trunk/wp-includes/bookmark.php

@@ -187 +187 @@
 
     if ( ! empty($search) ) {
-        $search = like_escape($search);
+        $search = esc_sql( like_escape( $search ) );
         $search = " AND ( (link_url LIKE '%$search%') OR (link_name LIKE '%$search%') OR (link_description LIKE '%$search%') ) ";
     }