Fatal error: Call to undefined function esc_sql() in www\wp-content\sunrise.php on line 11
https://www.ads-software.com/plugins/wordpress-mu-domain-mapping/
]]>I’m using your nice plugin with WordPress 3.6
I get the following notice when using WordPress in debug mode.
Notice: wpdb::escape est déprécié depuis la version 3.6! Utilisez wpdb::prepare() or esc_sql() à la place. in /var/www/webanalyse/wp-includes/functions.php on line 2871
I searched for escape in the plugin files and the hits are :
ad-integration.php (4 hits)
Line 2390: $sql = "INSERT INTO $table_name (user_login, failed_login_time) VALUES ('" . $wpdb->escape($username)."'," . time() . ")";
Line 2408: $sql = "SELECT count(*) AS count from $table_name WHERE user_login = '".$wpdb->escape($username)."' AND failed_login_time >= $time";
Line 2429: $sql .= " OR user_login = '".$wpdb->escape($username)."'";
Line 2447: $sql = "SELECT max(failed_login_time) FROM $table_name WHERE user_login = '".$wpdb->escape($username)."'";
Note for other users : this does not seem to have any effect on functionality. If you see this warning, this means you’re in debug mode, and you shouldn’t if you’re not actively developping your site.
Thanks !
https://www.ads-software.com/plugins/active-directory-integration/
]]>$query = "SELECT * FROM wp_network_members WHERE ". implode(' AND ', $searchSql);
But when I use the data validation outlined on the WP data validation page (https://codex.www.ads-software.com/Data_Validation#Database) as in the code below, I get no results:
$wpdb->escape("SELECT * FROM wp_network_members WHERE ". implode(' AND ', $searchSql));
FYI – here is an exampe of a query I ran that returned no results:
SELECT * FROM wp_network_members WHERE 1=1 AND `l_name` LIKE \'%b%\' AND `status`= \'published\'
What can I do to get the outcome I want without compromising on security?
]]>I don’t want to unnecessarily run data through extra functions if it isn’t required or is already successfully processed to remove problems.
]]>