Changeset 6180 for trunk/wp-includes/link-template.php

Timestamp:

10/02/2007 06:45:47 PM (19 years ago)

Author:

markjaquith

Message:

prepare() for wp-includes/ link-template.php, post.php, general-template.php, pluggable.php, functions.php. see #4553

File:

• trunk/wp-includes/link-template.php (modified) (4 diffs)

trunk/wp-includes/link-template.php

@@ -368 +368 @@
         $join = " INNER JOIN $wpdb->term_relationships AS tr ON p.ID = tr.object_id ";
         $cat_array = wp_get_object_terms($post->ID, 'category', 'fields=tt_ids');
-        $join .= ' AND (tr.term_taxonomy_id = ' . intval($cat_array[0]);
+        $join .= $wpdb->prepare(' AND (tr.term_taxonomy_id = %d', $cat_array[0]);
         for ( $i = 1; $i < (count($cat_array)); $i++ ) {
-            $join .= ' OR tr.term_taxonomy_id = ' . intval($cat_array[$i]);
+            $join .= $wpdb->prepare(' OR tr.term_taxonomy_id = %d', $cat_array[$i]);
         }
         $join .= ')';
@@ -383 +383 @@
 
     $join  = apply_filters( 'get_previous_post_join', $join, $in_same_cat, $excluded_categories );
-    $where = apply_filters( 'get_previous_post_where', "WHERE p.post_date < '$current_post_date' AND p.post_type = 'post' AND p.post_status = 'publish' $posts_in_ex_cats_sql", $in_same_cat, $excluded_categories );
+    $where = apply_filters( 'get_previous_post_where', $wpdb->prepare("WHERE p.post_date < %s AND p.post_type = 'post' AND p.post_status = 'publish' $posts_in_ex_cats_sql", $current_post_date), $in_same_cat, $excluded_categories );
     $sort  = apply_filters( 'get_previous_post_sort', 'ORDER BY p.post_date DESC LIMIT 1' );
 
@@ -401 +401 @@
         $join = " INNER JOIN $wpdb->term_relationships AS tr ON p.ID = tr.object_id ";
         $cat_array = wp_get_object_terms($post->ID, 'category', 'fields=tt_ids');
-        $join .= ' AND (tr.term_taxonomy_id = ' . intval($cat_array[0]);
+        $join .= $wpdb->prepare(' AND (tr.term_taxonomy_id = %d', $cat_array[0]);
         for ( $i = 1; $i < (count($cat_array)); $i++ ) {
-            $join .= ' OR tr.term_taxonomy_id = ' . intval($cat_array[$i]);
+            $join .= $wpdb->prepare(' OR tr.term_taxonomy_id = $d', $cat_array[$i]);
         }
         $join .= ')';
@@ -416 +416 @@
 
     $join  = apply_filters( 'get_next_post_join', $join, $in_same_cat, $excluded_categories );
-    $where = apply_filters( 'get_next_post_where', "WHERE p.post_date > '$current_post_date' AND p.post_type = 'post' AND p.post_status = 'publish' $posts_in_ex_cats_sql AND p.ID != $post->ID", $in_same_cat, $excluded_categories );
+    $where = apply_filters( 'get_next_post_where', $wpdb->prepare("WHERE p.post_date > %s AND p.post_type = 'post' AND p.post_status = 'publish' $posts_in_ex_cats_sql AND p.ID != %d", $current_post_date, $post->ID), $in_same_cat, $excluded_categories );
     $sort  = apply_filters( 'get_next_post_sort', 'ORDER BY p.post_date ASC LIMIT 1' );