Changeset 7645 for trunk/wp-trackback.php

Timestamp:

04/14/2008 04:13:25 PM (18 years ago)

Author:

ryan

Message:

Prepare DB queries in more places. Props filosofo. see #6644

File:

• trunk/wp-trackback.php (modified) (1 diff)

trunk/wp-trackback.php

@@ -87 +87 @@
     $comment_type = 'trackback';
 
-    $dupe = $wpdb->get_results("SELECT * FROM $wpdb->comments WHERE comment_post_ID = '$comment_post_ID' AND comment_author_url = '$comment_author_url'");
+    $dupe = $wpdb->get_results( $wpdb->prepare("SELECT * FROM $wpdb->comments WHERE comment_post_ID = %d AND comment_author_url = %s", $comment_post_ID, $comment_author_url) );
     if ( $dupe )
         trackback_response(1, 'We already have a ping from that URL for this post.');