Skip to:
Content

BuddyPress.org

Ticket #5388: 5388.diff

File 5388.diff, 789 bytes (added by imath, 12 years ago)
  • bp-core/bp-core-cache.php

    diff --git bp-core/bp-core-cache.php bp-core/bp-core-cache.php
    index 71e0330..8703528 100644
    function bp_update_meta_cache( $args = array() ) { 
    211211
    212212        // Get meta info
    213213        if ( ! empty( $uncached_ids ) ) {
    214                 $id_list   = join( ',', $object_ids );
    215                 $meta_list = $wpdb->get_results( $wpdb->prepare( "SELECT {$object_column}, meta_key, meta_value FROM {$meta_table} WHERE {$object_column} IN ($id_list)", $object_type ), ARRAY_A );
     214                $id_list   = join( ',', esc_sql( $object_ids ) );
     215                $meta_list = $wpdb->get_results( "SELECT {$object_column}, meta_key, meta_value FROM {$meta_table} WHERE {$object_column} IN ($id_list)", ARRAY_A );
    216216
    217217                if ( ! empty( $meta_list ) ) {
    218218                        foreach ( $meta_list as $metarow ) {