Closed jaswrks closed 8 years ago
Next Release Changelog:
esc_html()
was being used where esc_sql()
should've been used. Props @jaswsinc @kristineds. See Issue #268.Comment Mail v160618 has been released and includes changes from this GitHub Issue. See the v160618 announcement for further details.
This issue will now be locked to further updates. If you have something to add related to this GitHub Issue, please open a new GitHub Issue and reference this one (#268).
@kristineds See this line of code. That should be
esc_sql()
instead ofesc_html()
. I suggest a full review of the codebase (i.e., search foresc_html()
in that context and see if I duplicated that same bug across multiple class methods at some point. My bad!Referencing: https://developer.wordpress.org/reference/functions/esc_sql/