Changeset 6680

Timestamp:

01/29/2008 05:20:27 PM (17 years ago)

Author:

ryan

Message:

like_escape() from nbachiyski. see #5684

Location:

trunk

Files:

• wp-admin/includes/template.php (modified) (1 diff)
• wp-includes/formatting.php (modified) (1 diff)

trunk/wp-admin/includes/template.php

@@ -269 +269 @@
     $args = array('offset' => $start, 'number' => $pagesize, 'hide_empty' => 0);
  
-    if ( !empty( $searchterms ) )
-        $args['name__like'] = '%' . $searchterms;
+    if ( !empty( $searchterms ) ) {
+        $args['name__like'] = '%' . like_escape( $searchterms );
+    }
 
     $tags = get_terms( 'post_tag', $args );

trunk/wp-includes/formatting.php

@@ -1165 +1165 @@
     return apply_filters('attribute_escape', $safe_text, $text);
 }
+/**
+ * Escapes text for SQL LIKE special characters % and _
+ *
+ * @param string text the text to be escaped
+ * @return string text, safe for inclusion in LIKE query
+ */
+function like_escape($text) {
+    return str_replace(array("%", "_"), array("\\%", "\\_"), $text);
+}
 
 function wp_make_link_relative( $link ) {