[wp-trac] [WordPress Trac] #52506: Add escaping method for table names in SQL queries

WordPress Trac noreply at wordpress.org
Wed Jan 19 19:05:25 UTC 2022


#52506: Add escaping method for table names in SQL queries
-------------------------------------------------+-------------------------
 Reporter:  tellyworth                           |       Owner:  (none)
     Type:  defect (bug)                         |      Status:  new
 Priority:  normal                               |   Milestone:  Awaiting
                                                 |  Review
Component:  Database                             |     Version:
 Severity:  normal                               |  Resolution:
 Keywords:  dev-feedback has-patch has-unit-     |     Focuses:
  tests                                          |
-------------------------------------------------+-------------------------

Comment (by craigfrancis):

 I've created a basic [https://wpdb.eiv.dev/ performance testing page], to
 give an indication on how well it works with some basic examples, running
 them 10,000 times to compare the current and my patched version of
 `prepare()`.

 You can also [https://wpdb.eiv.dev/?view=db download /wp-content/db.php]
 so you can test it locally, or see my [https://wpdb.eiv.dev/?view=index
 index.php] to see how I've done it (yep, it's basic, it's running on a
 small virtual machine, with other processes running, the CPU has
 TurboBoost enabled, and it will be affected by temperature throttling,
 etc).

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/52506#comment:8>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list