Changeset 5138

Timestamp:

09/09/2011 09:59:30 PM (15 years ago)

Author:

johnjamesjacoby

Message:

Cast activity ID's as absints. Props Harry & Glyn. (branch)

File:

• branches/1.2/bp-activity/bp-activity-classes.php (modified) (3 diffs)

branches/1.2/bp-activity/bp-activity-classes.php

@@ -171 +171 @@
 
                 if ( is_array( $activity_ids ) )
-                        $activity_ids = implode( ',', $activity_ids );
-
-                $activity_ids = $wpdb->escape( $activity_ids );
+                        $activity_ids = implode ( ',', array_map( 'absint', $activity_ids ) );
+                else
+                        $activity_ids = implode ( ',', array_map( 'absint', explode ( ',', $activity_ids ) ) );
 
                 if ( empty( $activity_ids ) )
@@ -320 +320 @@
                 global $bp, $wpdb;
 
-                if ( is_array($activity_ids) )
-                        $activity_ids = implode( ',', $activity_ids );
-
-                $activity_ids = $wpdb->escape( $activity_ids );
+                if ( is_array( $activity_ids ) )
+                        $activity_ids = implode ( ',', array_map( 'absint', $activity_ids ) );
+                else
+                        $activity_ids = implode ( ',', array_map( 'absint', explode ( ',', $activity_ids ) ) );
 
                 return $wpdb->query( $wpdb->prepare( "DELETE FROM {$bp->activity->table_name} WHERE type = 'activity_comment' AND item_id IN ({$activity_ids})" ) );
@@ -331 +331 @@
                 global $bp, $wpdb;
 
-                if ( is_array($activity_ids) )
-                        $activity_ids = implode( ',', $activity_ids );
-
-                $activity_ids = $wpdb->escape( $activity_ids );
+                if ( is_array( $activity_ids ) )
+                        $activity_ids = implode ( ',', array_map( 'absint', $activity_ids ) );
+                else
+                        $activity_ids = implode ( ',', array_map( 'absint', explode ( ',', $activity_ids ) ) );
 
                 return $wpdb->query( $wpdb->prepare( "DELETE FROM {$bp->activity->table_name_meta} WHERE activity_id IN ({$activity_ids})" ) );