Changeset 28712 for trunk/src/wp-admin/includes/template.php

Timestamp:

06/10/2014 12:43:32 AM (12 years ago)

Author:

wonderboymusic

Message:

Replace all uses of like_escape() with $wpdb->esc_like().

Props miqrogroove.
See #10041.

File:

• trunk/src/wp-admin/includes/template.php (modified) (1 diff)

trunk/src/wp-admin/includes/template.php

@@ -633 +633 @@
          * @param int $limit Number of custom fields to retrieve. Default 30.
          */
-        $limit = (int) apply_filters( 'postmeta_form_limit', 30 );
-        $keys = $wpdb->get_col( "
-                SELECT meta_key
+        $limit = apply_filters( 'postmeta_form_limit', 30 );
+        $sql = "SELECT meta_key
                 FROM $wpdb->postmeta
                 GROUP BY meta_key
-                HAVING meta_key NOT LIKE '\_%'
+                HAVING meta_key NOT LIKE %s
                 ORDER BY meta_key
-                LIMIT $limit" );
+                LIMIT %d";
+        $keys = $wpdb->get_col( $wpdb->prepare( $sql, $wpdb->esc_like( '_' ) . '%', $limit ) );
         if ( $keys ) {
                 natcasesort( $keys );