From 5c57c78afa64d2feb90a8a9636a79ab86df38117 Mon Sep 17 00:00:00 2001 From: Jon Cave Date: Mon, 29 Jul 2013 18:16:47 +0000 Subject: [PATCH] Fix potential SQLi through improper use of API functions. git-svn-id: http://core.svn.wordpress.org/trunk@24875 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-admin/includes/ms.php | 2 +- wp-includes/bookmark.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/wp-admin/includes/ms.php b/wp-admin/includes/ms.php index 958b350fff..8d7bf3fa1d 100644 --- a/wp-admin/includes/ms.php +++ b/wp-admin/includes/ms.php @@ -371,7 +371,7 @@ function update_user_status( $id, $pref, $value, $deprecated = null ) { if ( null !== $deprecated ) _deprecated_argument( __FUNCTION__, '3.1' ); - $wpdb->update( $wpdb->users, array( $pref => $value ), array( 'ID' => $id ) ); + $wpdb->update( $wpdb->users, array( sanitize_key( $pref ) => $value ), array( 'ID' => $id ) ); $user = new WP_User( $id ); clean_user_cache( $user ); diff --git a/wp-includes/bookmark.php b/wp-includes/bookmark.php index ab4b8c8c6b..9a3ac6107c 100644 --- a/wp-includes/bookmark.php +++ b/wp-includes/bookmark.php @@ -186,7 +186,7 @@ function get_bookmarks($args = '') { } if ( ! empty($search) ) { - $search = like_escape($search); + $search = esc_sql( like_escape( $search ) ); $search = " AND ( (link_url LIKE '%$search%') OR (link_name LIKE '%$search%') OR (link_description LIKE '%$search%') ) "; }