WordPress.org
Get WordPress

Making WordPress.org

Changeset 5559


Ignore:
Timestamp:
06/08/2017 08:18:24 PM (9 years ago)
Author:
iandunn
Message:

Events: Harden geoname query against SQL injection

This was introduced in r5543.

Props xknown

File:
1 edited

Legend:

Unmodified
Added
Removed

  • sites/trunk/api.wordpress.org/public_html/events/1.0/index.php

    r5558 r5559  
    291291                                population DESC
    292292                        LIMIT 1",
    293                         $location_name . '%',
     293                        $wpdb->esc_like( $location_name ) . '%',
    294294                        $country,
    295295                        $timezone
Note: See TracChangeset for help on using the changeset viewer.