[wp-trac] [WordPress Trac] #10041: like_escape() should escape backslashes too
WordPress Trac
noreply at wordpress.org
Sun Mar 30 00:02:24 UTC 2014
#10041: like_escape() should escape backslashes too
------------------------------------------------+--------------------------
Reporter: miau_jp | Owner:
Type: defect (bug) | Status: reopened
Priority: high | Milestone: Future
Component: Formatting | Release
Severity: normal | Version: 2.8
Keywords: has-patch has-unit-tests 3.2-early | Resolution:
| Focuses:
------------------------------------------------+--------------------------
Comment (by miqrogroove):
Is the general direction in 10041.6.diff agreeable to everyone?
The input is a raw string, no slashes added or removed.
The output is a raw LIKE phrase, which is not SQL safe. The phrase can
then be used as a string in prepare() or real_escape() as part of a query.
I can pick this up and get it ready for the 4.0 milestone, but this ticket
needs a direction.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/10041#comment:25>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list