Changeset 5030

Timestamp:

03/12/2007 09:25:19 PM (20 years ago)

Author:

ryan

Message:

Quote values heading to DB. Cast some ints.

Location:

branches/2.1

Files:

• wp-admin/admin-db.php (modified) (1 diff)
• wp-includes/post.php (modified) (1 diff)

branches/2.1/wp-admin/admin-db.php

@@ -470 +470 @@
         if ($add_cats) {
                 foreach ($add_cats as $new_cat) {
-                        $wpdb->query("
-                                INSERT INTO $wpdb->link2cat (link_id, category_id)
-                                VALUES ($link_ID, $new_cat)");
+                        $new_cat = (int) $new_cat;
+                        if ( !empty($new_cat) )
+                                $wpdb->query("
+                                        INSERT INTO $wpdb->link2cat (link_id, category_id)
+                                        VALUES ('$link_ID', '$new_cat')");
                 }
         }

branches/2.1/wp-includes/post.php

@@ -801 +801 @@
         if ($add_cats) {
                 foreach ($add_cats as $new_cat) {
+                        $new_cat = (int) $new_cat;
                         if ( !empty($new_cat) )
                                 $wpdb->query("
                                         INSERT INTO $wpdb->post2cat (post_id, category_id) 
-                                        VALUES ($post_ID, $new_cat)");
+                                        VALUES ('$post_ID', '$new_cat')");
                 }
         }