Changeset 16625

Timestamp:

11/30/2010 08:04:38 PM (14 years ago)

Author:

ryan

Message:

Prepare properly. Props Vladimir Kolesnikov.

File:

• branches/3.0/wp-includes/comment.php (modified) (1 diff)

branches/3.0/wp-includes/comment.php

@@ -1655 +1655 @@
                 $pinged[] = $tb_ping;
             } else {
-                $wpdb->query( $wpdb->prepare("UPDATE $wpdb->posts SET to_ping = TRIM(REPLACE(to_ping, '$tb_ping', '')) WHERE ID = %d", $post_id) );
+                $wpdb->query( $wpdb->prepare("UPDATE $wpdb->posts SET to_ping = TRIM(REPLACE(to_ping, %s, '')) WHERE ID = %d", $tb_ping, $post_id) );
             }
         }