Premium plugin’s UserRole dynamic segment query incorrectly includes substrings
-
In the premium plugin’s dynamic segments,
lib/DynamicSegments/Filters/UserRole.php
thetoSql()
method queries the capabilities WP user meta for the selected role.The queried string does not include double-quotes that bound each entry, potentially leading to querying errors if custom roles are substrings of one another.
For example, on a site with the roles “Subscriber” and” “Paid Subscriber”, a dynamic segment query for
... LIKE %Subscriber% ...
would match the “Paid Subscriber” role.
Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
- The topic ‘Premium plugin’s UserRole dynamic segment query incorrectly includes substrings’ is closed to new replies.