From e1bb824b2500601521e86712db0a97536731a349 Mon Sep 17 00:00:00 2001 From: ryan Date: Tue, 30 Nov 2010 20:04:11 +0000 Subject: [PATCH] Prepare properly. Props Vladimir Kolesnikov. git-svn-id: http://svn.automattic.com/wordpress/trunk@16624 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-includes/comment.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wp-includes/comment.php b/wp-includes/comment.php index 114b15489..a3ef302dc 100644 --- a/wp-includes/comment.php +++ b/wp-includes/comment.php @@ -1723,7 +1723,7 @@ function do_trackbacks($post_id) { trackback($tb_ping, $post_title, $excerpt, $post_id); $pinged[] = $tb_ping; } else { - $wpdb->query( $wpdb->prepare("UPDATE $wpdb->posts SET to_ping = TRIM(REPLACE(to_ping, '$tb_ping', '')) WHERE ID = %d", $post_id) ); + $wpdb->query( $wpdb->prepare("UPDATE $wpdb->posts SET to_ping = TRIM(REPLACE(to_ping, %s, '')) WHERE ID = %d", $tb_ping, $post_id) ); } } }