Changeset 7845

Timestamp:

02/11/2014 03:01:20 PM (11 years ago)

Author:

boonebgorges

Message:

Fix incorrect $wpdb->prepare() use in bp_update_meta_cache().

Fixes #5388

Props imath

File:

• trunk/bp-core/bp-core-cache.php (modified) (1 diff)

trunk/bp-core/bp-core-cache.php

@@ -212 +212 @@
     // Get meta info
     if ( ! empty( $uncached_ids ) ) {
-        $id_list   = join( ',', $object_ids );
-        $meta_list = $wpdb->get_results( $wpdb->prepare( "SELECT {$object_column}, meta_key, meta_value FROM {$meta_table} WHERE {$object_column} IN ($id_list)", $object_type ), ARRAY_A );
+        $id_list   = join( ',', wp_parse_id_list( $uncached_ids ) );
+        $meta_list = $wpdb->get_results( esc_sql( "SELECT {$object_column}, meta_key, meta_value FROM {$meta_table} WHERE {$object_column} IN ({$id_list})" ), ARRAY_A );
 
         if ( ! empty( $meta_list ) ) {