$wp->query_vars['s'] without escape

  • Sound Strategies

    (@soundstrategies)


    10 years, 5 months ago

    Getting a lot of the following errors for search pages:
    PHP message: PHP Warning: preg_replace(): Unknown modifier ‘f’ in wp-content/plugins/subheading/subheading.php on line 520

    I think $wp->query_vars[‘s’] var should be escaped, at least with esc_sql, maybe extra escape for regexp.

    https://ww.wp.xz.cn/plugins/subheading/

The topic ‘$wp->query_vars['s'] without escape’ is closed to new replies.