| @@ -67,18 +67,13 @@ | ||
| 67 | 67 | |
| 68 | 68 | $current_user = get_current_user_id(); |
| 69 | 69 | |
| 70 | 70 | |
| 71 | - $sql = "SELECT * FROM " . $wpdb->prefix . CHART_BUILDER_DB_PREFIX . "charts WHERE status = %s"; | |
| 72 | - | |
| 73 | - $params = ['published']; | |
| 74 | - | |
| 75 | - if (!current_user_can('manage_options')) { | |
| 76 | - $sql .= " AND author_id = %d"; | |
| 77 | - $params[] = $current_user; | |
| 71 | + $sql = "SELECT * FROM ". $wpdb->prefix . CHART_BUILDER_DB_PREFIX . "charts WHERE status = 'published'"; | |
| 72 | + if( ! current_user_can( 'manage_options' ) ){ | |
| 73 | + $sql .= " AND author_id = ". absint( $current_user ) ." "; | |
| 78 | 74 | } |
| 79 | - // phpcs:ignore | |
| 80 | - $results = $wpdb->get_results($wpdb->prepare($sql, ...$params), ARRAY_A); | |
| 75 | + $results = $wpdb->get_results($sql, "ARRAY_A"); | |
| 81 | 76 | |
| 82 | 77 | register_block_type( |
| 83 | 78 | $block_namespace, |
| 84 | 79 | array( |