Changeset 5138

Timestamp:

09/09/2011 09:59:30 PM (13 years ago)

Author:

johnjamesjacoby

Message:

Cast activity ID's as absints. Props Harry & Glyn. (branch)

File:

• branches/1.2/bp-activity/bp-activity-classes.php (modified) (3 diffs)

branches/1.2/bp-activity/bp-activity-classes.php

@@ -171 +171 @@
 
         if ( is_array( $activity_ids ) )
-            $activity_ids = implode( ',', $activity_ids );
-
-        $activity_ids = $wpdb->escape( $activity_ids );
+            $activity_ids = implode ( ',', array_map( 'absint', $activity_ids ) );
+        else
+            $activity_ids = implode ( ',', array_map( 'absint', explode ( ',', $activity_ids ) ) );
 
         if ( empty( $activity_ids ) )
@@ -320 +320 @@
         global $bp, $wpdb;
 
-        if ( is_array($activity_ids) )
-            $activity_ids = implode( ',', $activity_ids );
-
-        $activity_ids = $wpdb->escape( $activity_ids );
+        if ( is_array( $activity_ids ) )
+            $activity_ids = implode ( ',', array_map( 'absint', $activity_ids ) );
+        else
+            $activity_ids = implode ( ',', array_map( 'absint', explode ( ',', $activity_ids ) ) );
 
         return $wpdb->query( $wpdb->prepare( "DELETE FROM {$bp->activity->table_name} WHERE type = 'activity_comment' AND item_id IN ({$activity_ids})" ) );
@@ -331 +331 @@
         global $bp, $wpdb;
 
-        if ( is_array($activity_ids) )
-            $activity_ids = implode( ',', $activity_ids );
-
-        $activity_ids = $wpdb->escape( $activity_ids );
+        if ( is_array( $activity_ids ) )
+            $activity_ids = implode ( ',', array_map( 'absint', $activity_ids ) );
+        else
+            $activity_ids = implode ( ',', array_map( 'absint', explode ( ',', $activity_ids ) ) );
 
         return $wpdb->query( $wpdb->prepare( "DELETE FROM {$bp->activity->table_name_meta} WHERE activity_id IN ({$activity_ids})" ) );