Changeset 28712 for trunk/src/wp-includes/taxonomy.php

Timestamp:

06/10/2014 12:43:32 AM (10 years ago)

Author:

wonderboymusic

Message:

Replace all uses of like_escape() with $wpdb->esc_like().

Props miqrogroove.
See #10041.

File:

• trunk/src/wp-includes/taxonomy.php (modified) (2 diffs)

trunk/src/wp-includes/taxonomy.php

@@ -1481 +1481 @@
 
     if ( ! empty( $args['name__like'] ) ) {
-        $name__like = like_escape( $args['name__like'] );
-        $where .= $wpdb->prepare( " AND t.name LIKE %s", '%' . $name__like . '%' );
+        $where .= $wpdb->prepare( " AND t.name LIKE %s", '%' . $wpdb->esc_like( $args['name__like'] ) . '%' );
     }
 
     if ( ! empty( $args['description__like'] ) ) {
-        $description__like = like_escape( $args['description__like'] );
-        $where .= $wpdb->prepare( " AND tt.description LIKE %s", '%' . $description__like . '%' );
+        $where .= $wpdb->prepare( " AND tt.description LIKE %s", '%' . $wpdb->esc_like( $args['description__like'] ) . '%' );
     }
 
@@ -1518 +1516 @@
 
     if ( ! empty( $args['search'] ) ) {
-        $search = like_escape( $args['search'] );
-        $where .= $wpdb->prepare( ' AND ((t.name LIKE %s) OR (t.slug LIKE %s))', '%' . $search . '%', '%' . $search . '%' );
+        $like = '%' . $wpdb->esc_like( $args['search'] ) . '%';
+        $where .= $wpdb->prepare( ' AND ((t.name LIKE %s) OR (t.slug LIKE %s))', $like, $like );
     }