Changeset 28722 for trunk/src/wp-includes/user.php

Timestamp:

06/10/2014 02:44:35 AM (10 years ago)

Author:

wonderboymusic

Message:

Set a variable for like-escaped string before looping in WP_User_Query::get_search_sql().

Props miqrogroove.
Fixes #10041.

File:

• trunk/src/wp-includes/user.php (modified) (1 diff)

trunk/src/wp-includes/user.php

@@ -803 +803 @@
         $leading_wild = ( 'leading' == $wild || 'both' == $wild ) ? '%' : '';
         $trailing_wild = ( 'trailing' == $wild || 'both' == $wild ) ? '%' : '';
+        $like = $leading_wild . $wpdb->esc_like( $string ) . $trailing_wild;
+
         foreach ( $cols as $col ) {
-            if ( 'ID' == $col )
+            if ( 'ID' == $col ) {
                 $searches[] = $wpdb->prepare( "$col = %s", $string );
-            else
-                $searches[] = $wpdb->prepare( "$col LIKE %s", $leading_wild . $wpdb->esc_like( $string ) . $trailing_wild );
+            } else {
+                $searches[] = $wpdb->prepare( "$col LIKE %s", $like );
+            }
         }