First half of escaping for LIKE special characters % and _ before preparing for SQL.

Description

Use this only before wpdb::prepare() or esc_sql() . Reversing the order is very bad for security.

Example Prepared Statement:

$wild = '%';
$find = 'only 43% of planets';
$like = $wild . $wpdb->esc_like( $find ) . $wild;
$sql  = $wpdb->prepare( "SELECT * FROM $wpdb->posts WHERE post_content LIKE %s", $like );

Example Escape Chain:

$sql  = esc_sql( $wpdb->esc_like( $input ) );

Parameters

$textstringrequired

The raw text to be escaped. The input typed by the user should have no extra or deleted slashes.

Return

Source

public function esc_like( $text ) {
	return addcslashes( $text, '_%\\' );
}

View all references View on Trac View on GitHub

Changelog