[wp-trac] [WordPress Trac] #15158: wpdb insert & update with null values

WordPress Trac noreply at wordpress.org
Fri Jan 17 15:01:22 UTC 2014


#15158: wpdb insert & update with null values
-------------------------+-----------------------------
 Reporter:  westi        |       Owner:  sorich87
     Type:  enhancement  |      Status:  closed
 Priority:  normal       |   Milestone:  Future Release
Component:  Database     |     Version:  3.0.1
 Severity:  normal       |  Resolution:  invalid
 Keywords:  needs-patch  |
-------------------------+-----------------------------
Changes (by arman.poghosyan):

 * keywords:  has-patch => needs-patch
 * status:  accepted => closed
 * resolution:   => invalid


Comment:

 Still no any PDO support in Wordpress and this patch is not in core
 either.
 I tested the patch in different scenarios and while it's working perfectly
 in INSERT and UPDATE statements, this patch breaks ->prepare for other
 statements that were working without patch,
 for example:
 {{{
 SHOW FULL COLUMNS FROM `table_name`;
 }}}

 I haven't tested it with SELECT statements either. But I still think that
 we need support for NULL in $wpdb->prepare, as many plugins solely rely on
 wordpress database functions and they can't operate with NULL values
 simply because wordpress doesn't support them in prepare, or they must
 forget about prepare and use other functions directly, than what's the
 purpose of prepare for security?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/15158#comment:37>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list