Changeset 28712 for trunk/src/wp-admin/includes/schema.php

Timestamp:

06/10/2014 12:43:32 AM (11 years ago)

Author:

wonderboymusic

Message:

Replace all uses of like_escape() with $wpdb->esc_like().

Props miqrogroove.
See #10041.

File:

• trunk/src/wp-admin/includes/schema.php (modified) (1 diff)

trunk/src/wp-admin/includes/schema.php

@@ -554 +554 @@
     // and the corresponding transient_timeout record from table b.
     $time = time();
-    $wpdb->query("DELETE a, b FROM $wpdb->options a, $wpdb->options b WHERE
-            a.option_name LIKE '\_transient\_%' AND
-            a.option_name NOT LIKE '\_transient\_timeout\_%' AND
-            b.option_name = CONCAT( '_transient_timeout_', SUBSTRING( a.option_name, 12 ) )
-            AND b.option_value < $time");
+    $sql = "DELETE a, b FROM $wpdb->options a, $wpdb->options b
+        WHERE a.option_name LIKE %s
+        AND a.option_name NOT LIKE %s
+        AND b.option_name = CONCAT( '_transient_timeout_', SUBSTRING( a.option_name, 12 ) )
+        AND b.option_value < %d";
+    $wpdb->query( $wpdb->prepare( $sql, $wpdb->esc_like( '_transient_' ) . '%', $wpdb->esc_like( '_transient_timeout_' ) . '%', $time ) );
 
     if ( is_main_site() && is_main_network() ) {
-        $wpdb->query("DELETE a, b FROM $wpdb->options a, $wpdb->options b WHERE
-            a.option_name LIKE '\_site\_transient\_%' AND
-            a.option_name NOT LIKE '\_site\_transient\_timeout\_%' AND
-            b.option_name = CONCAT( '_site_transient_timeout_', SUBSTRING( a.option_name, 17 ) )
-            AND b.option_value < $time");
-    }
+        $sql = "DELETE a, b FROM $wpdb->options a, $wpdb->options b
+            WHERE a.option_name LIKE %s
+            AND a.option_name NOT LIKE %s
+            AND b.option_name = CONCAT( '_site_transient_timeout_', SUBSTRING( a.option_name, 17 ) )
+            AND b.option_value < %d";
+        $wpdb->query( $wpdb->prepare( $sql, $wpdb->esc_like( '_site_transient_' ) . '%', $wpdb->esc_like( '_site_transient_timeout_' ) . '%', $time ) );
+    }
 }