like_escape() search string. see #15764

git-svn-id: http://svn.automattic.com/wordpress/trunk@16858 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-12-10 15:57:48 +00:00 · 2010-12-10 15:57:48 +00:00 · 3f98ecf721
parent ad8e837dc2
commit 3f98ecf721
1 changed files with 1 additions and 1 deletions
--- a/wp-includes/user.php
+++ b/wp-includes/user.php
@ -547,7 +547,7 @@ class WP_User_Query {
 			if ( 'ID' == $col )
 				$searches[] = "$col = '$string'";
 			else
-				$searches[] = "$col LIKE '$string$wild_char'";
+				$searches[] = "$col LIKE '" . like_escape($string) . "$wild_char'";
 		}

 		return ' AND (' . implode(' OR ', $searches) . ')';