Changeset 22429

Timestamp:

11/07/2012 07:30:59 PM (14 years ago)

Author:

nacin

Message:

Enforce a minimum of two arguments for wpdb::prepare(). The first argument is the query (or fragment thereof), which is required. Additional arguments are values to substitute into placeholders.

This will generate E_WARNINGs for insufficient arguments when prepare() is called with no additional arguments. This should discourage improper uses of prepare() under the guise of safely running a query.

props xknown. fixes #22262.

File:

• trunk/wp-includes/wp-db.php (modified) (1 diff)

trunk/wp-includes/wp-db.php

@@ -988 +988 @@
          *      if there was something to prepare
          */
-        function prepare( $query = null ) { // ( $query, *$args )
+        function prepare( $query, $args ) {
                 if ( is_null( $query ) )
                         return;