Make WordPress Core


Ignore:
Timestamp:
10/17/2022 05:56:34 PM (2 years ago)
Author:
audrasjb
Message:

Grouped backports to the 5.6 branch.

  • Editor: Bump @wordpress packages for the branch,
  • Media: Refactor search by filename within the admin,
  • REST API: Lockdown post parameter of the terms endpoint,
  • Customize: Escape blogname option in underscores templates,
  • Query: Validate relation in WP_Date_Query,
  • Posts, Post types: Apply KSES to post-by-email content,
  • General: Validate host on "Are you sure?" screen,
  • Posts, Post types: Remove emails from post-by-email logs,
  • Pings/trackbacks: Apply KSES to all trackbacks,
  • Mail: Reset PHPMailer properties between use,
  • Comments: Apply kses when editing comments,
  • Widgets: Escape RSS error messages for display.

Merges [54521-54530] to the 5.6 branch.
Props audrasjb, costdev, cu121, dd32, davidbaumwald, ehtis, johnbillion, johnjamesjacoby, martinkrcho, matveb, oztaser, paulkevan, peterwilsoncc, ravipatel, SergeyBiryukov, talldanwp, timothyblynjacobs, tykoted, voldemortensen, vortfu, xknown.

Location:
branches/5.6
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/5.6

  • branches/5.6/src/wp-includes/class-wp-query.php

    r49506 r54555  
    442442    public $thumbnails_cached = false;
    443443
     444    /**
     445     * Controls whether an attachment query should include filenames or not.
     446     *
     447     * @since 6.0.3
     448     * @var bool
     449     */
     450    protected $allow_query_attachment_by_filename = false;
    444451    /**
    445452     * Cached list of search stopwords.
     
    13921399
    13931400            $like      = $n . $wpdb->esc_like( $term ) . $n;
    1394             $search   .= $wpdb->prepare( "{$searchand}(({$wpdb->posts}.post_title $like_op %s) $andor_op ({$wpdb->posts}.post_excerpt $like_op %s) $andor_op ({$wpdb->posts}.post_content $like_op %s))", $like, $like, $like );
     1401
     1402            if ( ! empty( $this->allow_query_attachment_by_filename ) ) {
     1403                $search .= $wpdb->prepare( "{$searchand}(({$wpdb->posts}.post_title $like_op %s) $andor_op ({$wpdb->posts}.post_excerpt $like_op %s) $andor_op ({$wpdb->posts}.post_content $like_op %s) $andor_op (sq1.meta_value $like_op %s))", $like, $like, $like, $like );
     1404            } else {
     1405                $search .= $wpdb->prepare( "{$searchand}(({$wpdb->posts}.post_title $like_op %s) $andor_op ({$wpdb->posts}.post_excerpt $like_op %s) $andor_op ({$wpdb->posts}.post_content $like_op %s))", $like, $like, $like );
     1406            }
    13951407            $searchand = ' AND ';
    13961408        }
     
    17851797        $q = $this->fill_query_vars( $q );
    17861798
     1799        /**
     1800         * Filters whether an attachment query should include filenames or not.
     1801         *
     1802         * @since 6.0.3
     1803         *
     1804         * @param bool $allow_query_attachment_by_filename Whether or not to include filenames.
     1805         */
     1806        $this->allow_query_attachment_by_filename = apply_filters( 'wp_allow_query_attachment_by_filename', false );
     1807        remove_all_filters( 'wp_allow_query_attachment_by_filename' );
     1808
    17871809        // Parse meta query.
    17881810        $this->meta_query = new WP_Meta_Query();
     
    22162238        }
    22172239
    2218         if ( ! empty( $this->tax_query->queries ) || ! empty( $this->meta_query->queries ) ) {
     2240        if ( ! empty( $this->tax_query->queries ) || ! empty( $this->meta_query->queries ) || ! empty( $this->allow_query_attachment_by_filename ) ) {
    22192241            $groupby = "{$wpdb->posts}.ID";
    22202242        }
     
    22922314        }
    22932315        $where .= $search . $whichauthor . $whichmimetype;
     2316
     2317        if ( ! empty( $this->allow_query_attachment_by_filename ) ) {
     2318            $join .= " LEFT JOIN {$wpdb->postmeta} AS sq1 ON ( {$wpdb->posts}.ID = sq1.post_id AND sq1.meta_key = '_wp_attached_file' )";
     2319        }
    22942320
    22952321        if ( ! empty( $this->meta_query->queries ) ) {
Note: See TracChangeset for help on using the changeset viewer.