From technical perspective wpdb->prepare() essentially trickles down to escaping variables with either (depending on configuration) mysql_real_escape_string() or addslashes(). It’s not inherently more or less secure than any other properly implemented escaping routine. It is closer to specifics of WP and configuration it is aware off.
I think you need a join. $myquery = $wpdb->get_col( $wpdb->prepare( “SELECT DISTINCT meta_value FROM $wpdb->postmeta INNER JOIN $wpdb->posts ON $wpdb->postmeta.post_id = $wpdb->posts.ID WHERE meta_key = %s AND post_status IN (‘publish’)”, $metakey ) );
The problem was with $this->setup_links(); which used add_action(“publish_post”, array(&$this, “saving_posts”)); instead of add_action(“save_post”, array(&$this, “saving_posts”)); Apparently publish_post doesn’t work with custom post types.
You are using $wpdb incorrectly Take a look at these lines: $row = $newdb->get_results(“SELECT * FROM chi_clients WHERE accountNum=’$acctNum'”,ARRAY_A); $name= $row[‘lastName’] . “, ” . $row[‘firstName’]; $wpdb->get_results is going to return an array of “rows”. It is going to multidimensional. You are treating it like it has returned a one-dimensional array. That is, this (completely … Read more
esc_sql inserting weird chars to DB
It may be a wrong approach, but without creating a plugin, one of my seniors, once did a WordPress Shopping Cart project by creating extra tables for her custom purposes. What she did is to follow the other existing tables in WordPress database. Suppose what wp_posts table has by default is an ID. She opened … Read more
Why didn’t you use a Network/Multisite install? Problem mainly is that all the queries normally have the current install prefix in use. Without having real access (via $wpdb) to the prefix, this will get pretty messy. Actually your problem is a X-Y Problem. It would be less work to export everything from one of the … Read more
WordPress plugin tables become corrupt
You can simplify that by using $wpdb->get_var. $total = $wpdb->get_var( “SELECT COUNT( * ) AS total FROM tableA” ); echo “Total Records:” . $total; However, the code you’ve got should work– either version of it. I tested both. The only thing I notice is that the first version of the code should give you Array … Read more
why is $wpdb->update() causing a DB error from within wp_set_password()