Changeset 7645 for trunk/wp-admin/includes/comment.php

Timestamp:

04/14/2008 04:13:25 PM (18 years ago)

Author:

ryan

Message:

Prepare DB queries in more places. Props filosofo. see #6644

File:

• trunk/wp-admin/includes/comment.php (modified) (2 diffs)

trunk/wp-admin/includes/comment.php

@@ -4 +4 @@
     global $wpdb;
 
-    return $wpdb->get_var("SELECT comment_post_ID FROM $wpdb->comments
-            WHERE comment_author = '$comment_author' AND comment_date = '$comment_date'");
+    return $wpdb->get_var( $wpdb->prepare("SELECT comment_post_ID FROM $wpdb->comments
+            WHERE comment_author = %s AND comment_date = %s", $comment_author, $comment_date) );
 }
 
@@ -68 +68 @@
     global $wpdb;
     $post_id = (int) $post_id;
-    $pending = $wpdb->get_var( "SELECT COUNT(*) FROM $wpdb->comments WHERE comment_post_ID = $post_id AND comment_approved = '0'" );
+    $pending = $wpdb->get_var( $wpdb->prepare("SELECT COUNT(*) FROM $wpdb->comments WHERE comment_post_ID = %d AND comment_approved = '0'", $post_id) );
     return $pending;
 }