Changeset 7645 for trunk/wp-admin/edit-comments.php

Timestamp:

04/14/2008 04:13:25 PM (19 years ago)

Author:

ryan

Message:

Prepare DB queries in more places. Props filosofo. see #6644

File:

• trunk/wp-admin/edit-comments.php (modified) (1 diff)

trunk/wp-admin/edit-comments.php

@@ -13 +13 @@
         foreach ($_REQUEST['delete_comments'] as $comment) : // Check the permissions on each
                 $comment = (int) $comment;
-                $post_id = (int) $wpdb->get_var("SELECT comment_post_ID FROM $wpdb->comments WHERE comment_ID = $comment");
-                // $authordata = get_userdata( $wpdb->get_var("SELECT post_author FROM $wpdb->posts WHERE ID = $post_id") );
+                $post_id = (int) $wpdb->get_var( $wpdb->prepare( "SELECT comment_post_ID FROM $wpdb->comments WHERE comment_ID = %d", $comment) );
                 if ( !current_user_can('edit_post', $post_id) )
                         continue;