[buddypress-trac] [BuddyPress] #1223: Filters are often used in SQL without proper quote escaping (possible injection vulnerability)

[buddypress-trac at lists.automattic.com]

#1223: Filters are often used in SQL without proper quote escaping (possible
injection vulnerability)
--------------------------+-------------------------------------------------
Reporter:  rvenable       |       Owner:       
    Type:  defect         |      Status:  new  
Priority:  critical       |   Milestone:  1.1.2
Keywords:  sql injection  |  
--------------------------+-------------------------------------------------

Comment(by rvenable):

 Also, the like_escape() function returns its value, but that returned
 value isn't actually being used.

-- 
Ticket URL: <http://trac.buddypress.org/ticket/1223#comment:1>
BuddyPress <http://buddypress.org/>
BuddyPress