[wp-trac] [WordPress Trac] #11608: wpdb->prepare() is broken

[WordPress Trac]

#11608: wpdb->prepare() is broken
-----------------------------+----------------------------------------------
 Reporter:  hakre            |       Owner:  ryan                    
     Type:  feature request  |      Status:  new                     
 Priority:  normal           |   Milestone:  Future Release          
Component:  Database         |     Version:  2.9                     
 Severity:  normal           |    Keywords:  needs-patch dev-feedback
-----------------------------+----------------------------------------------

Comment(by miqrogroove):

 Now it's a security issue:

 {{{
 $wpdb->prepare("SELECT 1 WHERE table.row LIKE '%%stupidisas%%stupiddoes'
 AND othertable.row = %s", $_GET['thisisalsosafetodo'])
 }}}

 Enjoy

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/11608#comment:9>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software