Line 61: $result = db_query("SELECT uid, name FROM {users} WHERE name LIKE '%". db_escape_string($edit["name"]). "%' ORDER BY changed DESC");

With my installation of 4.5.1 I have no db_escape_string in the mysql database file within Drupal. Once I add this to the core db abstraction file it works great.

Comments

moshe weitzman’s picture

Anonymous’s picture