Changeset 33557

Timestamp:

08/03/2015 09:39:23 PM (11 years ago)

Author:

ocean90

Message:

Comments: IDs are integers.

Merge of [33555] to the 4.1 branch.

File:

• branches/4.1/src/wp-includes/post.php (modified) (1 diff)

branches/4.1/src/wp-includes/post.php

@@ -2889 +2889 @@
         foreach ( $group_by_status as $status => $comments ) {
                 // Sanity check. This shouldn't happen.
-                if ( 'post-trashed' == $status )
+                if ( 'post-trashed' == $status ) {
                         $status = '0';
-                $comments_in = implode( "', '", $comments );
-                $wpdb->query( "UPDATE $wpdb->comments SET comment_approved = '$status' WHERE comment_ID IN ('" . $comments_in . "')" );
+                }
+                $comments_in = implode( ', ', array_map( 'intval', $comments ) );
+                $wpdb->query( $wpdb->prepare( "UPDATE $wpdb->comments SET comment_approved = %s WHERE comment_ID IN ($comments_in)", $status ) );
         }