Changeset 7645 for trunk/wp-admin/import/textpattern.php

Timestamp:

04/14/2008 04:13:25 PM (17 years ago)

Author:

ryan

Message:

Prepare DB queries in more places. Props filosofo. see #6644

File:

• trunk/wp-admin/import/textpattern.php (modified) (2 diffs)

trunk/wp-admin/import/textpattern.php

@@ -9 +9 @@
     {
         global $wpdb;
-        return $wpdb->get_var('SELECT count(*) FROM '.$wpdb->comments.' WHERE comment_post_ID = '.$post_ID);
+        return $wpdb->get_var( $wpdb->prepare("SELECT count(*) FROM $wpdb->comments WHERE comment_post_ID = %d", $post_ID) );
     }
 }
@@ -18 +18 @@
     {
         global $wpdb;
-        return $wpdb->get_var('SELECT link_id FROM '.$wpdb->links.' WHERE link_name = "'.$wpdb->escape($linkname).'"');
+        return $wpdb->get_var( $wpdb->prepare("SELECT link_id FROM $wpdb->links WHERE link_name = %s", $linkname) );
     }
 }