[wp-trac] [WordPress Trac] #10041: like_escape() should escape backslashes too

[WordPress Trac]

#10041: like_escape() should escape backslashes too
------------------------------------------------+--------------------------
 Reporter:  miau_jp                             |       Owner:
     Type:  defect (bug)                        |      Status:  reopened
 Priority:  high                                |   Milestone:  Future
Component:  Formatting                          |  Release
 Severity:  normal                              |     Version:  2.8
 Keywords:  has-patch has-unit-tests 3.2-early  |  Resolution:
                                                |     Focuses:
------------------------------------------------+--------------------------

Comment (by miqrogroove):

 Is the general direction in 10041.6.diff agreeable to everyone?

 The input is a raw string, no slashes added or removed.

 The output is a raw LIKE phrase, which is not SQL safe.  The phrase can
 then be used as a string in prepare() or real_escape() as part of a query.

 I can pick this up and get it ready for the 4.0 milestone, but this ticket
 needs a direction.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/10041#comment:25>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform