| @@ -871,9 +871,9 @@ | ||
| 871 | 871 | return [ 0 ]; |
| 872 | 872 | } |
| 873 | 873 | |
| 874 | 874 | // phpcs:disable WordPress.DB.PreparedSQL.InterpolatedNotPrepared |
| 875 | - // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- Custom table query for search, table name is validated and cannot be parameterized with prepare(). | |
| 875 | + // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, PluginCheck.Security.DirectDB.UnescapedDBParameter -- Custom table query for search; table name from get_tablename() and validated (not user input); cannot be parameterized with prepare(). | |
| 876 | 876 | $results = $wpdb->get_col( |
| 877 | 877 | $wpdb->prepare( |
| 878 | 878 | "SELECT DISTINCT id FROM {$payments_table} |
| 879 | 879 | WHERE id LIKE %s |
