[wp-trac] [WordPress Trac] #58515: Need to use $wpdb->prepare instead of sprintf
WordPress Trac
noreply at wordpress.org
Mon Jun 12 14:34:22 UTC 2023
#58515: Need to use $wpdb->prepare instead of sprintf
-------------------------------------------------+-------------------------
Reporter: hiren1094 | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting
| Review
Component: Query | Version:
Severity: normal | Resolution:
Keywords: has-patch reporter-feedback 2nd- | Focuses: coding-
opinion | standards
-------------------------------------------------+-------------------------
Changes (by johnbillion):
* keywords: has-patch => has-patch reporter-feedback 2nd-opinion
Comment:
Thanks for the ticket and patch @hiren1094 . Have you tested this change?
I think you will find it breaks the query because it will cause single
quotes to be added to the IN clause.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/58515#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list