Changeset 16624 for trunk/wp-includes/comment.php

Timestamp:

11/30/2010 08:04:11 PM (14 years ago)

Author:

ryan

Message:

Prepare properly. Props Vladimir Kolesnikov.

File:

• trunk/wp-includes/comment.php (modified) (1 diff)

trunk/wp-includes/comment.php

@@ -1724 +1724 @@
                 $pinged[] = $tb_ping;
             } else {
-                $wpdb->query( $wpdb->prepare("UPDATE $wpdb->posts SET to_ping = TRIM(REPLACE(to_ping, '$tb_ping', '')) WHERE ID = %d", $post_id) );
+                $wpdb->query( $wpdb->prepare("UPDATE $wpdb->posts SET to_ping = TRIM(REPLACE(to_ping, %s, '')) WHERE ID = %d", $tb_ping, $post_id) );
             }
         }