Changeset 28712 for trunk/src/wp-includes/comment.php
- Timestamp:
- 06/10/2014 12:43:32 AM (11 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/src/wp-includes/comment.php
r28672 r28712 482 482 */ 483 483 protected function get_search_sql( $string, $cols ) { 484 $string = esc_sql( like_escape( $string ) );484 global $wpdb; 485 485 486 486 $searches = array(); 487 487 foreach ( $cols as $col ) 488 $searches[] = "$col LIKE '%$string%'";488 $searches[] = $wpdb->prepare( "$col LIKE %s", $wpdb->esc_like( $string ) ); 489 489 490 490 return ' AND (' . implode(' OR ', $searches) . ')';
Note: See TracChangeset
for help on using the changeset viewer.