Plugin Directory

Changeset 968018


Ignore:
Timestamp:
08/19/2014 04:13:10 AM (12 years ago)
Author:
harvest316
Message:

Clean up readme

File:
1 edited

Legend:

Unmodified
Added
Removed
  • sql-table-lookup/trunk/readme.txt

    r968016 r968018  
    1010
    1111[sql query="SELECT a FROM b WHERE c='d';"]
     12
    1213[sql]SELECT a FROM b WHERE c='d';[/sql]
     14
    1315[sql table="b" unique_lookup_field="c" lookup_value="d" return_field="a"]
    1416
    15 If a table or column name has a space or other unusual character in it, wrap it in `backticks`.  If a value contains a space or other unusual characters, wrap it in 'single quotes'.
     17If a table or column name has a space or other unusual character in it, wrap it in \`backticks\`.  If a value contains a
     18space or other unusual characters, wrap it in 'single quotes'.
    1619
    1720While I've taken considerable effort to prevent SQL injection attacks by escaping all other dangerous characters with esc_sql (which uses mysql_real_escape_string/mysqli_real_escape_string and addslashes), I would advise against using this plugin on a site that accepts any kind of posts or comments from untrusted sources.
Note: See TracChangeset for help on using the changeset viewer.