Merge pull request #43 from mullnerz/master

Fix: Changed behaviour of esc_sql() in WordPress 4.8.3

Author: gitlost

features/search-replace-export.feature

@@ -333,3 +333,18 @@ Feature: Search / replace with file export
       wp_users	display_name	0	PHP
       """
     And STDERR should be empty
+
+  Scenario: Search / replace should remove placeholder escape on export
+    Given a WP install
+    And I run `wp post create --post_title=test-remove-placeholder-escape% --porcelain`
+    Then save STDOUT as {POST_ID}
+
+    When I run `wp search-replace baz bar --export | grep test-remove-placeholder-escape`
+    Then STDOUT should contain:
+      """
+      'test-remove-placeholder-escape%'
+      """
+    And STDOUT should not contain:
+      """
+      'test-remove-placeholder-escape{'
+      """

src/Search_Replace_Command.php

@@ -547,7 +547,14 @@ private function write_sql_row_fields( $table, $rows ) {
 			if( ( $index % $export_insert_size == 0 && $index > 0 ) || $index == $count ) {
 				$sql .= ";\n";
 
-				$sql = $wpdb->prepare( $sql, array_values( $values ) );
+				if( method_exists( $wpdb, 'remove_placeholder_escape' ) ) {
+					// since 4.8.3
+					$sql = $wpdb->remove_placeholder_escape( $wpdb->prepare( $sql, array_values( $values ) ) );
+				} else {
+					// 4.8.2 or less
+					$sql = $wpdb->prepare( $sql, array_values( $values ) );
+				}
+
 				fwrite( $this->export_handle, $sql );
 
 				// If there is still rows to loop, reset $sql and $values variables.