WordPress.org

Make WordPress Core

Ticket #15618: 15618.diff

File 15618.diff, 838 bytes (added by wpmuguru, 7 years ago)
  • wp-includes/comment.php

     
    18651865        if ( is_wp_error( $response ) )
    18661866                return;
    18671867
    1868         $tb_url = addslashes( $trackback_url );
    1869         $wpdb->query( $wpdb->prepare("UPDATE $wpdb->posts SET pinged = CONCAT(pinged, '\n', '$tb_url') WHERE ID = %d", $ID) );
    1870         return $wpdb->query( $wpdb->prepare("UPDATE $wpdb->posts SET to_ping = TRIM(REPLACE(to_ping, '$tb_url', '')) WHERE ID = %d", $ID) );
     1868        $wpdb->query( $wpdb->prepare("UPDATE $wpdb->posts SET pinged = CONCAT(pinged, '\n', %s) WHERE ID = %d", $trackback_url, $ID) );
     1869        return $wpdb->query( $wpdb->prepare("UPDATE $wpdb->posts SET to_ping = TRIM(REPLACE(to_ping, %s, '')) WHERE ID = %d", $trackback_url, $ID) );
    18711870}
    18721871
    18731872/**