[wp-trac] [WordPress Trac] #26896: Quotes not added around strings using wpdb->prepare with sprintf position specifiers

WordPress Trac noreply at wordpress.org
Mon Nov 10 06:07:08 UTC 2014


#26896: Quotes not added around strings using wpdb->prepare with sprintf position
specifiers
--------------------------+----------------------
 Reporter:  neonWired     |       Owner:
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  Database      |     Version:  3.2.1
 Severity:  minor         |  Resolution:  wontfix
 Keywords:                |     Focuses:
--------------------------+----------------------
Changes (by pento):

 * keywords:  close needs-docs =>
 * status:  new => closed
 * resolution:   => wontfix
 * milestone:  Awaiting Review =>


Comment:

 Hi neonWired!

 Thanks for the bug report! As mentioned in the
 [https://developer.wordpress.org/reference/classes/wpdb/prepare/ developer
 reference], `prepare()` doesn't support argument numbering. While I
 understand it's partially available due to our use of `vsprintf()`, we
 don't plan on completing support for it.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/26896#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list