Improve security of AJAX customer search callback function LIKE query #9733
Labels
type-bug
workflow-needs-replication
workflow-pending-triage
Items that need to be triaged and reviewed before they are worked on.
Bug Report
Expected behavior
This isn't a bug per-say, but something I noticed that could be improved in the code base. For database search/like queries, it's better to use this syntax:
Instead of the current way:
$search = esc_sql( sanitize_text_field( $_GET['s'] ) );
The text was updated successfully, but these errors were encountered: