wpdb->insert: do I need to prepare against SQL injection?

No, you shouldn’t prepare or escape the data, this is done for you by the wpdb class.

From the wpdb class reference:

data:

(array) Data to insert (in column => value pairs). Both $data columns and $data values should be “raw” (neither should be SQL escaped).

If, however, you were writing your own SQL rather than using the insert method, then yes, you should escape using prepare.

Related Posts:

  1. $wpdb->get_row() only returns a single row?
  2. How to parse row results from $wpdb -> get_results
  3. Why $wpdb->show_errors() and print_error() is showing an output even if the query output is correct?
  4. Fetch array with $wpdb
  5. $wpdb->insert() and Values for Datetime Columns?
  6. Theoretical Multi-Server WordPress Setup with Shared Users
  7. Change post status based on meta value
  8. Speed optimization of $wpdb->get_results
  9. How do I create a single.php for a specific category?
  10. $wpdb is get_results escaped
  11. WordPress insert NOW() in TIMESTAMP column returns all zeros
  12. $wpdb prepare issue with mysql DATE_FORMAT
  13. How-To: wpdb Insert Record With Date
  14. How to pass NULL in where array for $wpdb->update
  15. Get random row from custom table
  16. store custom WP table names in a global variable
  17. wpdb prepare: passing varible number of fields as second argument
  18. I am not understandinhg $wpdb->prepare correctly
  19. Wpdb query for comment meta for current post
  20. How to Modify this $wpdb query to accept an array of post statuses
  21. Using WPDB class
  22. WPDB Update using Conditional Arrays
  23. $wpdb->get_results returns empty but value exists
  24. WP Sql query multiple where clause
  25. Problem displaying inserted form
  26. What is _transient_random_seed for?
  27. Get published posts and pages?
  28. Are there risks associated with using wp_options table using wpdb to update theme options
  29. wpdb get_results() and prepare when to use prepare?
  30. Syntax for $wpdb->prepare when searching in two columns
  31. Foreach loop using $wpdb not results from rows
  32. Get an array of meta_values for a user meta_key
  33. How to get a value-only flat array from $wpdb->get_results when selecting a single column, without foreach()?
  34. How to Instantiate wpdb Object in New File
  35. How do you build a wpdb query dynamically?
  36. Would this WPDB setup result in potential race conditions?
  37. How to update a row in a table in WordPress
  38. What’s the proper way to add users to my site in order to test things?
  39. Optimizing WordPress Queries – Removing Group By ID
  40. External DB Connection [closed]
  41. How to get entry by title by using wpdb
  42. Codex: Database Description: meaning of Cardinality
  43. Code only works every other time its run
  44. Can’t pass variable in wordpress wpdb->get_results
  45. WordPress db prepare
  46. How do I count columns on a custom WPDB query?
  47. how to get db values without using an loop with wpdb->get_results()
  48. Custom SQL query ORDER BY term_order
  49. Trouble inserting string containing quotations marks with wpdb in save_post hook
  50. How to left join meta in queries [closed]
  51. How to run wp_insert_post() & wpdb on the background?
  52. Trying to get variable from WP table and toggle its value
  53. Set MySQL variables in WPDB
  54. get_results query with accent
  55. How to prepare an array of values with $wpdb
  56. Is querying wpdb directly and skipping actions provided by WP’s core “wp_update_post” a good idea?
  57. $wpdb->insert() doesnt work anymore
  58. $wpdb query outputs php code instead of executing it
  59. wpdb query not working
  60. Getting values from wpdb
  61. Where can I see MySQL hostname and port for wp-config.php
  62. WordPress wpdb->insert returns int(0) => doesn’t insert anything, no errors!
  63. Using “->” in a page to exceute $wpdb query gives error
  64. Exclude specific terms from all queries using posts_where or something similar
  65. $wpdb->get_results not returning an array
  66. query a newly created table using $wpdb
  67. Get all sticky posts from one user through user ID
  68. WPDB Query Question with Category Only
  69. wpdb result arrray inside an array
  70. $wpdb->num_rows doesn’t work
  71. How can I change my meta_query to SQL wpdb query?
  72. How capturate wpdb exceptions?
  73. how to list all post that are in the custom taxonomy using $wpdb
  74. Limit left join
  75. “This message was added in version X” showing a later version than current one
  76. Get records from Formidable Table using $wpdb->get_col
  77. Prepare WPDB with meta key and meta value
  78. How to get row value from wpdb
  79. I am using wpdb but it not working perfectly.but if I dont use form data its work
  80. Escaping a WPDB Object in One Shot
  81. wont add form details to database or send me mail
  82. Missing argument 2 for wpdb::prepare() [duplicate]
  83. wpdb->update update the entire table instead of one row
  84. WPDP related functions look to work but they don’t
  85. Save customizer default values to DB on theme activation
  86. Plugin with connection to database – Single function
  87. Alter the main search query to search posts by coauthor user name
  88. Protect custom form from SQL injection
  89. why nl2br() is adding an extra ?
  90. How to add more custom fields in user meta table simultaneously
  91. wpdb->update error
  92. get unserialized array without using get_option()
  93. SQL Query to select post title & post ID from a particular category
  94. Create Table Failed Column Date DateType
  95. Using $wpdb to update current post
  96. Checking if meta_value exists for any user
  97. Can you create a new wpdb that connects to an SQL (not MYSQL) database? [duplicate]
  98. DBDelta: “table doesn’t exist” for a table that was just created
  99. query using wpdb in wordpress gets me no result
  100. WP Recommended Table Exclusions?

Leave a Comment

techhipbettruvabetnorabahisbahis forumutaraftarium24eduedueduseduedueduedusedueduedu