[wp-trac] [WordPress Trac] #10041: like_escape() should escape backslashes too
WordPress Trac
noreply at wordpress.org
Tue Jun 10 22:39:47 UTC 2014
#10041: like_escape() should escape backslashes too
---------------------------------+-----------------------------
Reporter: miau_jp | Owner: wonderboymusic
Type: defect (bug) | Status: reopened
Priority: high | Milestone: 4.0
Component: Formatting | Version: 2.8
Severity: normal | Resolution:
Keywords: 4.0-early has-patch | Focuses:
---------------------------------+-----------------------------
Comment (by johnjamesjacoby):
Replying to [comment:66 miqrogroove]:
> The problem wasn't just with usage. The docs actually said
like_escape() was SQL safe even though it was not. So we have to
anticipate that message resulted in the function being used in many
strange ways in plugins.
You're probably right. We audited usages in BuddyPress last year, and
wrote tests for them, which then all broke when `like_escape()` was
deprecated. :)
--
Ticket URL: <https://core.trac.wordpress.org/ticket/10041#comment:67>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list