[wp-trac] [WordPress Trac] #58515: Need to use $wpdb->prepare instead of sprintf

WordPress Trac noreply at wordpress.org
Mon Jun 12 14:34:22 UTC 2023


#58515: Need to use $wpdb->prepare instead of sprintf
-------------------------------------------------+-------------------------
 Reporter:  hiren1094                            |       Owner:  (none)
     Type:  defect (bug)                         |      Status:  new
 Priority:  normal                               |   Milestone:  Awaiting
                                                 |  Review
Component:  Query                                |     Version:
 Severity:  normal                               |  Resolution:
 Keywords:  has-patch reporter-feedback 2nd-     |     Focuses:  coding-
  opinion                                        |  standards
-------------------------------------------------+-------------------------
Changes (by johnbillion):

 * keywords:  has-patch => has-patch reporter-feedback 2nd-opinion


Comment:

 Thanks for the ticket and patch @hiren1094 . Have you tested this change?
 I think you will find it breaks the query because it will cause single
 quotes to be added to the IN clause.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/58515#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list