Not working with WP 4.1.1

I am still using SermonBrowser with WP 4.1.1, but I made some modifications.
The support forum is broken, true.
Could it also be the PHP version? What version is your webspace running?

What modifications did you make? What version of PHP should I be using? I can contact my webspace support and ask them to change to a working version if I know what it is. Thanks

SermonBrowser uses the php-function mysql_real_escape_string, which is not supported from PHP version 5.5 upwards.
So it should work with 5.4 or below.
My solutions was to remove all occurences in sb-includes/admin.php and instead use the wordpress function $wpdb->prepare() to check before saving to the database (anywhere where an INSERT or UPDATE occurs)

So only where INSERT or UPDATE occurs or all instances of mysql_real_escape_string should be replaced with $wpdb->prepare in sb-includes/admin.php?

You can do either one of these two things:
1. Remove all occurences of mysql_real_escape_string AND use $wpdb->prepare on all INSERTS and UPDATES.

2. Simply replace mysql_real_escape_string with esc_sql. Works too, but if you can, you should use the first process.

Save a backup of your original file, just in case you mess up.

I just went for it and replaced all occurrences and it appears to be working again! Thanks!

I am not a computer wizard by any means, I don’t know anything about code and such. The guy who used to look after our website is no longer around and I am having this same problem trying to upload sermon audio files. Can someone explain to me step by step how to deal with this mystql_real_escape_string situation please?

sorry for my ignorance and Thank you for any help!!!

shaunavonalliance,

From your WP dashboard go to the plugins on the bar on the left side. Find sermon browser and select Edit. On the right side of the screen look for sermon-browser/sb-includes/admin.php.

What I did was click on it then select all the text in the window and copy/paste it into a Word document. I then did a find/replace in Word to find all instances of mysql_real_escape_string and replace with $wpdb->prepare.

I then copy/pasted my updated text back into the WordPress edit window. I crossed my fingers and said a quick prayer then pushed the Update File button. Everything worked!

Make sure you keep a copy of your unmodified code and your modified code in Word (or whatever word processing program your use) on your computer for future reference!

Good luck!

You should never, ever, use Word to alter any code oder HTML.
Use a real editor like https://notepad-plus-plus.org.
You can use the method described if you do not know how to use FTP.
Notepad++ has an easy search and replace tool.
Replacing mysql_real_escape_string with $wpdb->prepare is wrong, because you should use $wpdb->prepare before entering into the database.
But you can use esc_sql and replace all occurences of mysql_real_escape_string with that.

Every time I make the changes and hit update file I get a connection was reset page pop up saying the site may be temporarily unavailable or too busy. I have re done it atleast 5 times and still bounces to this.

Are you familiar with finding the file via FTP and making the necessary changes?

I used the find tool right on the code page and highlited each one and pasted the esc_sql in its place and hit update file

I know. But since that is not working, FTP would be the alternative.

Sorry, I don’t know what FTP is. I don’t know how I got talked into looking after this.

I have tried and tried to make the changes and every time I press update file it says the site may be temporarily unavailable or too busy. Maybe we will have to stop paying the bill till wordpress gets this figured out. This is ridiculous.