← All changes | includes/class-wpwbot-search.php +8 -8 8.7.5 → 5.4.2 View file →

		@@ -32,9 +32,9 @@
32	32	*/
33	33	public function search( $keyword = '' ) {
34	34	global $wpdb;
35	35	$special_chars = $this->get_special_chars();
36		- $s = $keyword ? esc_attr( $keyword ) : esc_attr(wp_unslash($_POST['keyword']));
	36	+ $s = $keyword ? esc_attr( $keyword ) : esc_attr( $_POST['keyword'] );
37	37	$s = stripslashes( $s );
38	38	$s = str_replace( array( "\r", "\n" ), '', $s );
39	39	$s = str_replace( $special_chars, '', $s );
40	40	$show_cats = 'true';
		@@ -128,34 +128,34 @@
128	128	$like = '%' . $wpdb->esc_like( $search_term_like ) . '%';
129	129	if ( $search_term_len > 1 ) {
130	130	$search_array[] = $wpdb->prepare( '( term LIKE %s )', $like );
131	131	} else {
132		- $search_array[] = $wpdb->prepare( '( term = %s )', $search_term );
	132	+ $search_array[] = $wpdb->prepare( '( term = "%s" )', $search_term );
133	133	}
134	134	foreach ( $search_in_arr as $search_in_term ) {
135	135	switch ( $search_in_term ) {
136	136	case 'title':
137		- $relevance_array['title'][] = $wpdb->prepare( "( case when ( term_source = 'title' AND term = %s ) then {$relevance_title} * count else 0 end )", $search_term );
	137	+ $relevance_array['title'][] = $wpdb->prepare( "( case when ( term_source = 'title' AND term = '%s' ) then {$relevance_title} * count else 0 end )", $search_term );
138	138	$relevance_array['title'][] = $wpdb->prepare( "( case when ( term_source = 'title' AND term LIKE %s ) then {$relevance_title_like} * count else 0 end )", $like );
139	139	break;
140	140	case 'content':
141		- $relevance_array['content'][] = $wpdb->prepare( "( case when ( term_source = 'content' AND term = %s ) then {$relevance_content} * count else 0 end )", $search_term );
	141	+ $relevance_array['content'][] = $wpdb->prepare( "( case when ( term_source = 'content' AND term = '%s' ) then {$relevance_content} * count else 0 end )", $search_term );
142	142	$relevance_array['content'][] = $wpdb->prepare( "( case when ( term_source = 'content' AND term LIKE %s ) then {$relevance_content_like} * count else 0 end )", $like );
143	143	break;
144	144	case 'excerpt':
145		- $relevance_array['content'][] = $wpdb->prepare( "( case when ( term_source = 'excerpt' AND term = %s ) then {$relevance_content} * count else 0 end )", $search_term );
	145	+ $relevance_array['content'][] = $wpdb->prepare( "( case when ( term_source = 'excerpt' AND term = '%s' ) then {$relevance_content} * count else 0 end )", $search_term );
146	146	$relevance_array['content'][] = $wpdb->prepare( "( case when ( term_source = 'excerpt' AND term LIKE %s ) then {$relevance_content_like} * count else 0 end )", $like );
147	147	break;
148	148	case 'category':
149		- $relevance_array['category'][] = $wpdb->prepare( "( case when ( term_source = 'category' AND term = %s ) then 35 else 0 end )", $search_term );
	149	+ $relevance_array['category'][] = $wpdb->prepare( "( case when ( term_source = 'category' AND term = '%s' ) then 35 else 0 end )", $search_term );
150	150	$relevance_array['category'][] = $wpdb->prepare( "( case when ( term_source = 'category' AND term LIKE %s ) then 5 else 0 end )", $like );
151	151	break;
152	152	case 'tag':
153		- $relevance_array['tag'][] = $wpdb->prepare( "( case when ( term_source = 'tag' AND term = %s ) then 35 else 0 end )", $search_term );
	153	+ $relevance_array['tag'][] = $wpdb->prepare( "( case when ( term_source = 'tag' AND term = '%s' ) then 35 else 0 end )", $search_term );
154	154	$relevance_array['tag'][] = $wpdb->prepare( "( case when ( term_source = 'tag' AND term LIKE %s ) then 5 else 0 end )", $like );
155	155	break;
156	156	case 'sku':
157		- $relevance_array['sku'][] = $wpdb->prepare( "( case when ( term_source = 'sku' AND term = %s ) then 300 else 0 end )", $search_term );
	157	+ $relevance_array['sku'][] = $wpdb->prepare( "( case when ( term_source = 'sku' AND term = '%s' ) then 300 else 0 end )", $search_term );
158	158	$relevance_array['sku'][] = $wpdb->prepare( "( case when ( term_source = 'sku' AND term LIKE %s ) then 50 else 0 end )", $like );
159	159	break;
160	160	}
161	161	}