← All changes | chart/chart-builder-block.php +11 -4 3.1.5 → 3.5.4 View file →

		@@ -65,13 +65,20 @@
65	65	$block_name = 'chart';
66	66	$block_namespace = 'chart-builder/' . $block_name;
67	67
68	68	$current_user = get_current_user_id();
69		- $sql = "SELECT * FROM ". $wpdb->prefix . CHART_BUILDER_DB_PREFIX . "charts WHERE status = 'published'";
70		- if( ! current_user_can( 'manage_options' ) ){
71		- $sql .= " AND author_id = ". absint( $current_user ) ." ";
	69	+
	70	+
	71	+ $sql = "SELECT * FROM " . $wpdb->prefix . CHART_BUILDER_DB_PREFIX . "charts WHERE status = %s";
	72	+
	73	+ $params = ['published'];
	74	+
	75	+ if (!current_user_can('manage_options')) {
	76	+ $sql .= " AND author_id = %d";
	77	+ $params[] = $current_user;
72	78	}
73		- $results = $wpdb->get_results($sql, "ARRAY_A");
	79	+ // phpcs:ignore
	80	+ $results = $wpdb->get_results($wpdb->prepare($sql, ...$params), ARRAY_A);
74	81
75	82	register_block_type(
76	83	$block_namespace,
77	84	array(