Changeset 24876 for branches/3.6/wp-includes/bookmark.php

Timestamp:

07/29/2013 06:18:58 PM (11 years ago)

Author:

duck_

Message:

Fix potential SQLi through improper use of API functions. For 3.6.

Location:

branches/3.6

Files:

• . (modified) (1 prop)
• wp-includes/bookmark.php (modified) (1 diff)

branches/3.6/wp-includes/bookmark.php

@@ -187 +187 @@
 
     if ( ! empty($search) ) {
-        $search = like_escape($search);
+        $search = esc_sql( like_escape( $search ) );
         $search = " AND ( (link_url LIKE '%$search%') OR (link_name LIKE '%$search%') OR (link_description LIKE '%$search%') ) ";
     }