Use sanitize_key() instead of esc_sql() when 'escaping' variable DB field names. see #21767.



git-svn-id: https://core.svn.wordpress.org/trunk@24714 1a063a9b-81f0-0310-95a4-ce76da25c4cd
More clear and concise escaping in get_page_by_path(). see #21767.



git-svn-id: https://core.svn.wordpress.org/trunk@24715 1a063a9b-81f0-0310-95a4-ce76da25c4cd