Changeset 8121 for trunk/bp-members/bp-members-classes.php

Timestamp:

03/13/2014 11:24:51 AM (11 years ago)

Author:

boonebgorges

Message:

Don't use mysql_real_escape_string() in BP_Signup

This causes problems on PHP 5.5+, where the mysql_* functions have been
deprecated.

See #5374

File:

• trunk/bp-members/bp-members-classes.php (modified) (1 diff)

trunk/bp-members/bp-members-classes.php

@@ -151 +151 @@
             // Search terms
             if ( ! empty( $r['usersearch'] ) ) {
-                $search_terms_clean = mysql_real_escape_string( mysql_real_escape_string( $r['usersearch'] ) );
+                $search_terms_clean = esc_sql( esc_sql( $r['usersearch'] ) );
                 $search_terms_clean = like_escape( $search_terms_clean );
                 $sql['where'][] = "( user_login LIKE '%" . $search_terms_clean . "%' OR user_email LIKE '%" . $search_terms_clean . "%' OR meta LIKE '%" . $search_terms_clean . "%' )";