[wp-trac] [WordPress Trac] #26896: Quotes not added around strings using wpdb->prepare with sprintf position specifiers

WordPress Trac noreply at wordpress.org
Tue Jan 21 13:34:05 UTC 2014


#26896: Quotes not added around strings using wpdb->prepare with sprintf position
specifiers
------------------------------+------------------------------
 Reporter:  neonWired         |       Owner:
     Type:  defect (bug)      |      Status:  new
 Priority:  normal            |   Milestone:  Awaiting Review
Component:  Database          |     Version:  3.2.1
 Severity:  minor             |  Resolution:
 Keywords:  close needs-docs  |
------------------------------+------------------------------
Changes (by johnbillion):

 * keywords:   => close needs-docs


Comment:

 Thanks for the report!

 Position specifiers aren't supported by WPDB's `prepare()` method. It
 doesn't use `sprintf()` under the hood like you may well expect.

 This ticket is therefore invalid, however I'll leave this open for now as
 we may need to clarify the documentation.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/26896#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list