Skip to:
Content

BuddyPress.org


Ignore:
Timestamp:
12/04/2012 12:03:40 PM (13 years ago)
Author:
djpaul
Message:

Fix alot of WPDB->Prepare() warnings in the 1.6 branch. See #4654

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/1.6/bp-groups/bp-groups-classes.php

    r6277 r6557  
    177177
    178178        // Modify group count usermeta for members
    179         $wpdb->query( $wpdb->prepare( "UPDATE {$wpdb->usermeta} SET meta_value = meta_value - 1 WHERE meta_key = 'total_group_count' AND user_id IN ( {$user_id_str} )" ) );
     179        $wpdb->query( "UPDATE {$wpdb->usermeta} SET meta_value = meta_value - 1 WHERE meta_key = 'total_group_count' AND user_id IN ( {$user_id_str} )" );
    180180
    181181        // Now delete all group member entries
     
    235235        $gids = implode( ',', $gids['groups'] );
    236236
    237         $paged_groups = $wpdb->get_results( $wpdb->prepare( "SELECT id as group_id FROM {$bp->groups->table_name} WHERE ( name LIKE '{$filter}%%' OR description LIKE '{$filter}%%' ) AND id IN ({$gids}) {$pag_sql}" ) );
    238         $total_groups = $wpdb->get_var( $wpdb->prepare( "SELECT COUNT(id) FROM {$bp->groups->table_name} WHERE ( name LIKE '{$filter}%%' OR description LIKE '{$filter}%%' ) AND id IN ({$gids})" ) );
     237        $paged_groups = $wpdb->get_results( "SELECT id as group_id FROM {$bp->groups->table_name} WHERE ( name LIKE '{$filter}%%' OR description LIKE '{$filter}%%' ) AND id IN ({$gids}) {$pag_sql}" );
     238        $total_groups = $wpdb->get_var( "SELECT COUNT(id) FROM {$bp->groups->table_name} WHERE ( name LIKE '{$filter}%%' OR description LIKE '{$filter}%%' ) AND id IN ({$gids})" );
    239239
    240240        return array( 'groups' => $paged_groups, 'total' => $total_groups );
     
    533533
    534534        if ( !bp_current_user_can( 'bp_moderate' ) )
    535             $hidden_sql = $wpdb->prepare( " AND status != 'hidden'");
     535            $hidden_sql = " AND status != 'hidden'";
    536536
    537537        $letter = like_escape( $wpdb->escape( $letter ) );
     
    539539        if ( !empty( $limit ) && !empty( $page ) ) {
    540540            $pag_sql = $wpdb->prepare( " LIMIT %d, %d", intval( ( $page - 1 ) * $limit), intval( $limit ) );
    541             $total_groups = $wpdb->get_var( $wpdb->prepare( "SELECT COUNT(DISTINCT g.id) FROM {$bp->groups->table_name_groupmeta} gm1, {$bp->groups->table_name_groupmeta} gm2, {$bp->groups->table_name} g WHERE g.id = gm1.group_id AND g.id = gm2.group_id AND gm2.meta_key = 'last_activity' AND gm1.meta_key = 'total_member_count' AND g.name LIKE '$letter%%' {$hidden_sql} {$search_sql} {$exclude_sql}" ) );
    542         }
    543 
    544         $paged_groups = $wpdb->get_results( $wpdb->prepare( "SELECT g.*, gm1.meta_value as total_member_count, gm2.meta_value as last_activity FROM {$bp->groups->table_name_groupmeta} gm1, {$bp->groups->table_name_groupmeta} gm2, {$bp->groups->table_name} g WHERE g.id = gm1.group_id AND g.id = gm2.group_id AND gm2.meta_key = 'last_activity' AND gm1.meta_key = 'total_member_count' AND g.name LIKE '$letter%%' {$hidden_sql} {$search_sql} {$exclude_sql} ORDER BY g.name ASC {$pag_sql}"  ) );
     541            $total_groups = $wpdb->get_var( "SELECT COUNT(DISTINCT g.id) FROM {$bp->groups->table_name_groupmeta} gm1, {$bp->groups->table_name_groupmeta} gm2, {$bp->groups->table_name} g WHERE g.id = gm1.group_id AND g.id = gm2.group_id AND gm2.meta_key = 'last_activity' AND gm1.meta_key = 'total_member_count' AND g.name LIKE '$letter%%' {$hidden_sql} {$search_sql} {$exclude_sql}" );
     542        }
     543
     544        $paged_groups = $wpdb->get_results( "SELECT g.*, gm1.meta_value as total_member_count, gm2.meta_value as last_activity FROM {$bp->groups->table_name_groupmeta} gm1, {$bp->groups->table_name_groupmeta} gm2, {$bp->groups->table_name} g WHERE g.id = gm1.group_id AND g.id = gm2.group_id AND gm2.meta_key = 'last_activity' AND gm1.meta_key = 'total_member_count' AND g.name LIKE '$letter%%' {$hidden_sql} {$search_sql} {$exclude_sql} ORDER BY g.name ASC {$pag_sql}" );
    545545
    546546        if ( !empty( $populate_extras ) ) {
     
    637637            $hidden_sql = "WHERE status != 'hidden'";
    638638
    639         return $wpdb->get_var( $wpdb->prepare( "SELECT COUNT(id) FROM {$bp->groups->table_name} {$hidden_sql}" ) );
     639        return $wpdb->get_var( "SELECT COUNT(id) FROM {$bp->groups->table_name} {$hidden_sql}" );
    640640    }
    641641
     
    692692
    693693            case 'hidden' :
    694                 $status_sql = $wpdb->prepare( "AND g.status = 'hidden'" );
     694                $status_sql = "AND g.status = 'hidden'";
    695695                break;
    696696
    697697            case 'private' :
    698                 $status_sql = $wpdb->prepare( "AND g.status = 'private'" );
     698                $status_sql = "AND g.status = 'private'";
    699699                break;
    700700
    701701            case 'public' :
    702702            default :
    703                 $status_sql = $wpdb->prepare( "AND g.status = 'public'" );
     703                $status_sql = "AND g.status = 'public'";
    704704                break;
    705705        }
     
    11741174        $exclude_admins_sql = '';
    11751175        if ( !empty( $exclude_admins_mods ) )
    1176             $exclude_admins_sql = $wpdb->prepare( "AND is_admin = 0 AND is_mod = 0" );
     1176            $exclude_admins_sql = "AND is_admin = 0 AND is_mod = 0";
    11771177
    11781178        $banned_sql = '';
    11791179        if ( !empty( $exclude_banned ) )
    1180             $banned_sql = $wpdb->prepare( " AND is_banned = 0" );
     1180            $banned_sql = " AND is_banned = 0";
    11811181
    11821182        $exclude_sql = '';
    11831183        if ( !empty( $exclude ) )
    1184             $exclude_sql = $wpdb->prepare( " AND m.user_id NOT IN ({$exclude})" );
     1184            $exclude_sql = " AND m.user_id NOT IN ({$exclude})";
    11851185
    11861186        if ( bp_is_active( 'xprofile' ) )
Note: See TracChangeset for help on using the changeset viewer.