[wp-trac] [WordPress Trac] #11608: wpdb->prepare() is broken

WordPress Trac wp-trac at lists.automattic.com
Thu Dec 31 15:04:38 UTC 2009


#11608: wpdb->prepare() is broken
--------------------------+-------------------------------------------------
 Reporter:  hakre         |       Owner:  ryan     
     Type:  defect (bug)  |      Status:  new      
 Priority:  normal        |   Milestone:  3.0      
Component:  Database      |     Version:  2.9      
 Severity:  normal        |    Keywords:  has-patch
--------------------------+-------------------------------------------------

Comment(by Denis-de-Bernardy):

 I've uploaded a patch that uses the double approach. that being said, I
 think that no matter what we do, there will still be problematic strings
 with literal % characters. Example:

 {{{
 WHERE foo = 'a %s b'
 }}}

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/11608#comment:62>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list