WordPress.org
Get WordPress

Make WordPress Core

Changes between Initial Version and Version 1 of Ticket #56091


Ignore:
Timestamp:
06/28/2022 07:35:15 PM (4 years ago)
Author:
SergeyBiryukov
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #56091 – Description

    initial v1  
    1 Now `wpdb::prepare()` supports `%i` for Identifiers (e.g. table/field names), via [https://core.trac.wordpress.org/changeset/53575 commit 52506], and [https://core.trac.wordpress.org/ticket/52506 ticket 52506].
     1Now `wpdb::prepare()` supports `%i` for Identifiers (e.g. table/field names), via commit [53575], and ticket #52506.
    22
    33Queries within WP Core should use this, to ensure variables are always quoted, and avoid static analysis tools flagging unescaped SQL input (a non-`literal-string`) for the `$query` parameter: