Changeset 3270015

Timestamp:

04/09/2025 09:28:48 PM (11 months ago)

Author:

marcusbs

Message:

bug fix

Location:

wp-mailing-group

Files:

• tags/3.0.1/mailing-group-module.php (modified) (2 diffs)
• trunk/mailing-group-module.php (modified) (2 diffs)

wp-mailing-group/tags/3.0.1/mailing-group-module.php

@@ -1443 +1443 @@
     
     // Check if table exists
-    if($wpdb->get_var($wpdb->prepare("SHOW TABLES LIKE %s", $table_name_user_taxonomy)) == $table_name_user_taxonomy) {
-        $result = $wpdb->query($wpdb->prepare("DELETE FROM %s WHERE user_id = %d", $table_name_user_taxonomy, $user_id));
+    if($wpdb->get_var($wpdb->prepare("SHOW TABLES LIKE " . $wpdb->_real_escape($table_name_user_taxonomy))) == $table_name_user_taxonomy) {
+        $result = $wpdb->query($wpdb->prepare("DELETE FROM " . $wpdb->_real_escape($table_name_user_taxonomy) . " WHERE user_id = %d", $user_id));
         if($result === false) {
             error_log('Failed to delete user taxonomy for user ID: ' . $user_id);
@@ -1452 +1452 @@
     $get_subscription_taxonomy = $objMem->selectRowsV2($table_name_requestmanager, "", $wpdb->prepare(" where email = %s", $email));
     $subscriptoinid            = $get_subscription_taxonomy[0]->id;
-    $wpdb->query($wpdb->prepare("DELETE FROM %s WHERE user_id = %d", $table_name_requestmanager_taxonomy, $subscriptoinid));
-    $wpdb->query($wpdb->prepare("DELETE FROM %s WHERE id = %d", $table_name_requestmanager, $subscriptoinid));
+    $wpdb->query($wpdb->prepare("DELETE FROM " . $wpdb->_real_escape($table_name_requestmanager_taxonomy) . " WHERE user_id = %d", $subscriptoinid));
+    $wpdb->query($wpdb->prepare("DELETE FROM " . $wpdb->_real_escape($table_name_requestmanager) . " WHERE id = %d", $subscriptoinid));
 }
 function wpmg_custom_menu_hack()

wp-mailing-group/trunk/mailing-group-module.php

@@ -1443 +1443 @@
     
     // Check if table exists
-    if($wpdb->get_var($wpdb->prepare("SHOW TABLES LIKE %s", $table_name_user_taxonomy)) == $table_name_user_taxonomy) {
-        $result = $wpdb->query($wpdb->prepare("DELETE FROM %s WHERE user_id = %d", $table_name_user_taxonomy, $user_id));
+    if($wpdb->get_var($wpdb->prepare("SHOW TABLES LIKE " . $wpdb->_real_escape($table_name_user_taxonomy))) == $table_name_user_taxonomy) {
+        $result = $wpdb->query($wpdb->prepare("DELETE FROM " . $wpdb->_real_escape($table_name_user_taxonomy) . " WHERE user_id = %d", $user_id));
         if($result === false) {
             error_log('Failed to delete user taxonomy for user ID: ' . $user_id);
@@ -1452 +1452 @@
     $get_subscription_taxonomy = $objMem->selectRowsV2($table_name_requestmanager, "", $wpdb->prepare(" where email = %s", $email));
     $subscriptoinid            = $get_subscription_taxonomy[0]->id;
-    $wpdb->query($wpdb->prepare("DELETE FROM %s WHERE user_id = %d", $table_name_requestmanager_taxonomy, $subscriptoinid));
-    $wpdb->query($wpdb->prepare("DELETE FROM %s WHERE id = %d", $table_name_requestmanager, $subscriptoinid));
+    $wpdb->query($wpdb->prepare("DELETE FROM " . $wpdb->_real_escape($table_name_requestmanager_taxonomy) . " WHERE user_id = %d", $subscriptoinid));
+    $wpdb->query($wpdb->prepare("DELETE FROM " . $wpdb->_real_escape($table_name_requestmanager) . " WHERE id = %d", $subscriptoinid));
 }
 function wpmg_custom_menu_hack()