Escape underscores in queries to avoid wildcard query

Background woocommerce/woocommerce#16846 Props @javorszky
Digital-Octopus-Dev · Sep 20, 2017 · ef97ca1 · ef97ca1
1 parent 88b8287
commit ef97ca1
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/classes/wp-background-process.php b/classes/wp-background-process.php
@@ -195,7 +195,7 @@ protected function is_queue_empty() {
 				$column = 'meta_key';
 			}
 
-			$key = $this->identifier . '_batch_%';
+			$key = $wpdb->esc_like( $this->identifier . '_batch_' ) . '%';
 
 			$count = $wpdb->get_var( $wpdb->prepare( "
 			SELECT COUNT(*)
@@ -270,7 +270,7 @@ protected function get_batch() {
 				$value_column = 'meta_value';
 			}
 
-			$key = $this->identifier . '_batch_%';
+			$key = $wpdb->esc_like( $this->identifier . '_batch_' ) . '%';
 
 			$query = $wpdb->get_row( $wpdb->prepare( "
 			SELECT *