Make WordPress Core


Ignore:
Timestamp:
04/14/2008 04:13:25 PM (16 years ago)
Author:
ryan
Message:

Prepare DB queries in more places. Props filosofo. see #6644

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/upload.php

    r7542 r7645  
    212212if ( 1 == count($posts) && is_singular() ) :
    213213   
    214     $comments = $wpdb->get_results("SELECT * FROM $wpdb->comments WHERE comment_post_ID = $id AND comment_approved != 'spam' ORDER BY comment_date");
     214    $comments = $wpdb->get_results( $wpdb->prepare("SELECT * FROM $wpdb->comments WHERE comment_post_ID = %d AND comment_approved != 'spam' ORDER BY comment_date", $id) );
    215215    if ( $comments ) :
    216216        // Make sure comments, post, and post_author are cached
Note: See TracChangeset for help on using the changeset viewer.