From 7e8287e92c30bb5eea83882c7e7841331ce56bbf Mon Sep 17 00:00:00 2001 From: Jory Hogeveen Date: Thu, 27 Oct 2016 21:24:59 +0200 Subject: [PATCH 1/2] Fix slash problem with LIKE statements Fixes #3823 --- includes/data.php | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/includes/data.php b/includes/data.php index 848d5e86c3..7ec2e6f1c5 100644 --- a/includes/data.php +++ b/includes/data.php @@ -111,13 +111,14 @@ function pods_sanitize_like( $input ) { } else { global $wpdb; + $input = wp_unslash( $input ); if ( pods_version_check( 'wp', '4.0' ) ) { - $output = $wpdb->esc_like( pods_sanitize( $input ) ); + $output = pods_sanitize( $wpdb->esc_like( $input ) ); } else { // like_escape is deprecated in WordPress 4.0 - $output = like_escape( pods_sanitize( $input ) ); + $output = pods_sanitize( like_escape( $input ) ); } } From b3f87cb25bc6a1ef7dfa010ae787c51a296343f7 Mon Sep 17 00:00:00 2001 From: Jory Hogeveen Date: Fri, 28 Oct 2016 13:06:45 +0200 Subject: [PATCH 2/2] pods_unslash instead of wp_unslash --- includes/data.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/data.php b/includes/data.php index 7ec2e6f1c5..dfc1dddb9e 100644 --- a/includes/data.php +++ b/includes/data.php @@ -111,7 +111,7 @@ function pods_sanitize_like( $input ) { } else { global $wpdb; - $input = wp_unslash( $input ); + $input = pods_unslash( $input ); if ( pods_version_check( 'wp', '4.0' ) ) { $output = pods_sanitize( $wpdb->esc_like( $input ) );