Your last prepare() snippet should work just fine, check that you have $wpdb declared as global in your function.
Also blank page seems extreme, enable WP_DEBUG if not yet and see if there are any specific errors that cause it.
Related Posts:
- Should I sanitize an email address before passing it to the is_email() function?
- Escaping and sanitizing SVGs in metabox textarea
- What is the difference between wp_strip_all_tags and wp_filter_nohtml_kses?
- Reason for Lowercase usernames
- What is the best way to sanitize data?
- Should nonce be sanitized?
- esc_url removes white space. Can I change that to using ‘-‘?
- WP Coding standards – escaping the inescapable?
- Escape hexadecimals/rgba values
- Must I serialize/sanitize/escape array data before using set_transient?
- Echo JavaScript Safely
- wp_kses ignore allowed and allow everything
- Sanitize array callback for the WordPress Settings API
- How to escape $_GET and check if isset?
- What’s a safe / good way to output HTML safely within WordPress templates?
- Do Not Understand → Rule No. 4: Making Data Safe Is About Context [closed]
- Sanitizing output that contains quotes?
- WP_Customize_Manager: How to get control ID
- How to use wp_filter_oembed_result?
- Sanitization html output itself
- Post text sanitization after publishing/editing – changes are not saved
- wp_set_object_terms() without accents
- Escaping data from database (users table) is necessary?
- Properly sanitize an input field “Name “
- Is sanitize_title enough to generate post slugs?
- Data sanitization: Best Practices with code examples
- When to use esc_html and when to use sanitize_text_field?
- Sanitize and data validation with apply_filters() function
- Custom page with variables in url. Nice url with add_rewrite_rule
- is_email() VS sanitize_email()
- Settings API – sanitizing urls, email addresses and text
- Sanitation needed for WP_Query or get_posts calls?
- Escaping WP_Query tax_query when term has special character(s)
- Can I create customizer setting that can handle plugin shortcode?
- Does WordPress sanitize arguments to WP_Query?
- Make shortcode work with nested double quotes
- Shortcode putting html such as
- How to properly sanitize strings without $wpdb->prepare?
- Default WordPress settings API data sanitization
- How do I sanitize a javascript text?
- Importing JSON feed should the content be sanitized?
- Should I sanitize custom post meta if it is going to be escaped later?
- How to display data from custom table in wordpress database?
- Remove tinyMCE from admin and replace with textarea
- wp_sanitize_redirect strips out @ signs (even from parameters) — why?
- array_map() for sanitizing $_POST
- Correct processing of `$_POST`, following WordPress Coding Standards
- How does WordPress store data?
- why is esc_html() returning nothing given a string containing a high-bit character?
- Sanitizing comments or escaping comment_text()
- Default WordPress taxonomy (Tag) – How to add a custom field to form and save it to the database
- How Could I sanitize the receive data from this code
- Settings API – sanitize_callback is not called and it leads to an incorrect behavior
- Why does wp_redirect strip out %0A (url encoded new line character) and how do I make it stop?
- Best Practice for Validating and Sanitizing Data
- Storing HTML in wp_options
- What is the proper way to validate and sanitize JSON response from REST API?
- Is it necessary to sanitize wp_set_password user input?
- Modify automatically generation of slug when term is created
- Can i use the same sanitize function on multiple theme mod textboxes?
- What function removes apostrophes when making a slug?
- Sanitize Disqus API results?
- How to sanitize uploaded file filename from a plugin?
- Copy content stored in meta to post content
- remove_accents does not seem to work (when used inside sanitize_file_name filter)
- Customizer: Category Select Sanitize
- Prevent invalid or empty values from being saved to the database and retain the form field values upon error
- data (html) migration to posts
- Theme Customizier sanitize_callback not working
- Change wp_sanitize function?
- Do we have to santise html passing into Javascript ? How?
- Why the WP Core team does not allow filter_* functions? [closed]
- data-type=”” … needed post tags stripped of characters
- How to escape html generate by a loop
- confused about sanitize_email after is_email [duplicate]
- Trouble creating custom sanitization function for user list dropdown
- Output Sanitation
- Invalidate username if it contains @ symbol
- Contact Form Security
- How to allow certain PHP functions when using sanitize_callback in the word press customizer
- Display the line breaks in user bio without using html
- Change user nicename without sanitize
- Sanitize $_GET variable when comparing
- HTML in category name
- How can I apply custom sanitization to new usernames?
- How do I sanitize the str_replace function in javascript variables
- Sanitizing textarea for wp_insert_post with TinyMCE enabled or disabled
- Safely store code(html/js..) into database
- Sanitaizing Select Optin For Custom Post Type Metabox in WP
- settings api and the data passed in the parameter
- HTML Img with data:image src gets sanitized in admin?
- Do I need to sanitize $_POST[‘keyword’] before send to ‘s’ parameter?
- Where is the HTML-handler part in the wpdb class?
- Can we validate data from jquery
- Custom-Metaboxes-and-Fields text_url field prepending http://
- Data validation for inline javascript
- Sanitize and Save metabox values
- How to return responsive images from a sanitize_callback?
- esc_url, esc_url_raw or sanitize_url?
- how to sanitizing $_POST with the correct way?