Changeset 7645 for trunk/wp-admin/includes/export.php

Timestamp:

04/14/2008 04:13:25 PM (18 years ago)

Author:

ryan

Message:

Prepare DB queries in more places. Props filosofo. see #6644

File:

• trunk/wp-admin/includes/export.php (modified) (3 diffs)

trunk/wp-admin/includes/export.php

@@ -18 +18 @@
 if ( $author and $author != 'all' ) {
     $author_id = (int) $author;
-    $where = " WHERE post_author = '$author_id' ";
+    $where = $wpdb->prepare(" WHERE post_author = %d ", $author_id);
 }
 
@@ -218 +218 @@
 <?php } ?>
 <?php
-$postmeta = $wpdb->get_results("SELECT * FROM $wpdb->postmeta WHERE post_id = $post->ID");
+$postmeta = $wpdb->get_results( $wpdb->prepare("SELECT * FROM $wpdb->postmeta WHERE post_id = %d", $post->ID) );
 if ( $postmeta ) {
 ?>
@@ -229 +229 @@
 <?php } ?>
 <?php
-$comments = $wpdb->get_results("SELECT * FROM $wpdb->comments WHERE comment_post_ID = $post->ID");
+$comments = $wpdb->get_results( $wpdb->prepare("SELECT * FROM $wpdb->comments WHERE comment_post_ID = %d", $post->ID) );
 if ( $comments ) { foreach ( $comments as $c ) { ?>
 <wp:comment>