• In the premium plugin’s dynamic segments, lib/DynamicSegments/Filters/UserRole.php the toSql() method queries the capabilities WP user meta for the selected role.

    The queried string does not include double-quotes that bound each entry, potentially leading to querying errors if custom roles are substrings of one another.

    For example, on a site with the roles “Subscriber” and” “Paid Subscriber”, a dynamic segment query for ... LIKE %Subscriber% ... would match the “Paid Subscriber” role.

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • The topic ‘Premium plugin’s UserRole dynamic segment query incorrectly includes substrings’ is closed to new replies.