No the sanitization is already done. Well the mysql_real_escape_string is done, it’s considered bad form to filter html on input. I personally think doing it on output kinda breaches DRY. If you did in WordPress I highly suspect somewhere else will do it again resulting in double html entities encoding.
Also by the way, wpdb::insert is basically just a wrapper for wpdb::prepare.
Related Posts:
- Should I sanitize an email address before passing it to the is_email() function?
- Escaping and sanitizing SVGs in metabox textarea
- What is the difference between wp_strip_all_tags and wp_filter_nohtml_kses?
- Reason for Lowercase usernames
- Should nonce be sanitized?
- esc_url removes white space. Can I change that to using ‘-‘?
- WP Coding standards – escaping the inescapable?
- Sanitatizing when using the posts_where hook
- Escape hexadecimals/rgba values
- Must I serialize/sanitize/escape array data before using set_transient?
- How to save html and text in the database?
- Echo JavaScript Safely
- wpdb get_results() and prepare when to use prepare?
- wp_kses ignore allowed and allow everything
- Sanitize array callback for the WordPress Settings API
- sanitize_text_field and apostrophe problem
- How to escape $_GET and check if isset?
- What’s a safe / good way to output HTML safely within WordPress templates?
- Do Not Understand → Rule No. 4: Making Data Safe Is About Context [closed]
- Sanitizing output that contains quotes?
- WP_Customize_Manager: How to get control ID
- How to use wp_filter_oembed_result?
- Where is the HTML-handler part in the wpdb class?
- Sanitization html output itself
- Post text sanitization after publishing/editing – changes are not saved
- wp_set_object_terms() without accents
- Escaping data from database (users table) is necessary?
- Properly sanitize an input field “Name “
- What is the proper way to sanitize $_POST and $_GET vars?
- Why is sanitize_text_field() selectively trimming data?
- Return only Count from a wp_query request?
- Sanitizing integer input for update_post_meta
- Which KSES should be used and when?
- $wpdb->prepare() warning in WordPress 3.5
- WP doesn’t show Array Custom Fields?
- Use WP_Query with a custom SQL query
- Sanitizing post content for use in an email
- Delete/replace img tags in post content for auto published posts [closed]
- SQL query not working in alphabetical post title/content search
- Print out WordPress user ID – two sites with same code but different output
- wpdb-> not adding prefix to custom table
- $wpdb variable throw this error Call to a member function get_results() on a non-object in
- What is the difference between sanitize_text_field() and wp_filter_nohtml_kses()?
- Creating a Front-end based User Search
- Get multiple custom field values in a $wpdb query [duplicate]
- Query WP data with the WPDB API from outside WordPress
- where to apply “apply filters” and other Sanitization Functions
- WordPress get pagination on wpdb get_results
- Why would switch_to_blog stop working?
- How to sanitize user input?
- wp-admin post.php JavaScript Links Not Working
- creating custom function to log actions in plugin
- How to use $wpdb (from the template) to update the DB, without being an admin
- Return XML of Post Metadata
- Querying wpdb using PHP
- Use WordPress MultiSite (WPMS) with a remote database for each created site
- How to do set post permalinks using 6 digit random unique function?
- Database query works fine outside WordPress
- Problem in inserting row to custom database table
- How to query custom post types with mixed AND & OR statements for custom fields
- $wpdb->insert inserting only f character in custom table
- How to test the outcome of a wpdb query?
- Cannot get wpdb data (Error in a simple fuction) [closed]
- Why does wpdb->update delete other meta?
- Make a SQL query with wpdb in WordPress
- Getting variable from Database
- Custom $wpdb returns unexpected time based results
- Specify strict ‘order by’ in WordPress query
- $wpdb->update() always need a second try
- How to get specific attribute from DB
- Displaying data from another database
- Save sql file after doing insert wpdb
- Query custom taxonomy for category including children
- Can I use wpdb to insert query results into a post?
- $wpdb->prepare error after WordPress update [duplicate]
- How to use checked() function with multiple check box group? How to properly sanitize that checkbox group?
- Get post featured image id with $wpdb
- What’s wrong with this wpdb query?
- How do I have a user upload a blog post and then retrieve that to display in a card on the site?
- Display current ranking of post as a number in post title
- How to pass an input value into wpdb->Prepare
- ob_end_flush(): failed to send buffer of zlib output compression (0) in external php
- Fill New Taxonomies
- What is the correct way to search 3 custom fields only in WordPress?
- How to save Checkbox-Options in Plugin Options Page
- No result after wpdb->insert
- Help posting values to DB on submit using $wpdb->query
- Update database record in plugin
- Dedicated server and WPDB Class : huge slow-down of the website
- Escaping and sanitization
- $wpdb how can i save my postmeta table before querying it
- wpdb insert working in one function, but not another
- Fetching array of postmeta with $wpdb and in_array conditional
- Proper way to trigger a MySQL query via link in a plugin
- Sanitizing a custom query’s clauses
- Can’t get expected result from a wpdb query
- pull custom fields values from wp-database in a nested foreach loop
- $wpdb->insert not working for last select option
- Query Problem in Clustom Plugin
- inner-wrap div pushing custom table far down on page