Changeset 7073

Timestamp:

05/15/2013 06:10:14 PM (12 years ago)

Author:

r-a-y

Message:

Use ->prepare() on 'user_id' parameter. See r7072.

File:

• trunk/bp-groups/bp-groups-classes.php (modified) (1 diff)

trunk/bp-groups/bp-groups-classes.php

@@ -443 +443 @@
 
         if ( ! empty( $r['user_id'] ) ) {
-            $total_sql['where'][] = "m.group_id = g.id AND m.user_id = {$r['user_id']} AND m.is_confirmed = 1 AND m.is_banned = 0";
+            $total_sql['where'][] = $wpdb->prepare( "m.group_id = g.id AND m.user_id = %d AND m.is_confirmed = 1 AND m.is_banned = 0", $r['user_id'] );
         }