Front-end warning: Missing Argument for wpdb

Mr. Wood, you said “This code is dangerous, because it leads to the possibility of what is called an “SQL Injection Exploit”. Which is shorthand for a specific way to hack your site.”

Do you think that the 3 theme wpdb errors I posted above – that first appeared after this WP update – are the reasons that my Amazon banners & Widgets were being hijacked by stampedemedia?

&…. would you PLEASE look at the 3 errors I posted above and tell me the right code? Pretty please?

@marviene: Call me “Otto”. ??

Without the actual lines of code that those errors refer to, there’s really no way for me to tell. However, I think it’s doubtful that that is how you were having the problems you describe. The attack I’m talking about isn’t exactly theoretical, but it’s a tricky one to perform on any given site without deeper knowledge of the site itself.

Thank you Otto,

It’s actually quite a relief that these holes aren’t easy to hack. We’ve asked the theme maker to take a look at it.

: ) Have a good day and once again, thank you!

Hello Otto,

After upgrading to 3.5, I am getting the following one line error message:

Warning: Missing argument 2 for wpdb::prepare(), called in /home/asiaconf/public_html/wp-content/plugins/wp-super-edit/wp-super-edit.core.class.php on line 114 and defined in /home/asiaconf/public_html/wp-includes/wp-db.php on line 990

The relevant code is:

function prepare( $query, $args ) {

How do I fix this to remove the error?

Thanks

i have a fake solution:
reup this file wp-db, in wp version 3.4.2, overwrite the same file of wp 3.5. the error stops for me, until the owner of site send me a real solution.

Hi! I am using The Jewelry Shop theme from Sarah Neuber.

I also have the same problem:
Warning: Missing argument 2 for wpdb::prepare(), called in /home3/momentib/public_html/lavitabellashop/wp-content/themes/TheJewelryShop/lib/engine/cart_actions.php on line 6626 and defined in /home3/momentib/public_html/lavitabellashop/wp-includes/wp-db.php on line 990

How do I go about solving this?

I cannot contact my theme author since she has removed the email for contact and they also removed themselves from theme forest.

I really need to know how to fix this.

Thanks!

have a similar issue

$wpdb->prepare( “
SELECT * FROM {$wpdb->prefix}woocommerce_shipping_zones
ORDER BY zone_order ASC
” ) );

not sure what i need to be adding to the above code to make it work