From 3f98ecf72144e362ca62cbfec672201c6dcb486e Mon Sep 17 00:00:00 2001 From: ryan Date: Fri, 10 Dec 2010 15:57:48 +0000 Subject: [PATCH] like_escape() search string. see #15764 git-svn-id: http://svn.automattic.com/wordpress/trunk@16858 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-includes/user.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wp-includes/user.php b/wp-includes/user.php index d24c20b2d6..b28177fe6b 100644 --- a/wp-includes/user.php +++ b/wp-includes/user.php @@ -547,7 +547,7 @@ class WP_User_Query { if ( 'ID' == $col ) $searches[] = "$col = '$string'"; else - $searches[] = "$col LIKE '$string$wild_char'"; + $searches[] = "$col LIKE '" . like_escape($string) . "$wild_char'"; } return ' AND (' . implode(' OR ', $searches) . ')';