| @@ -77,8 +77,9 @@ | ||
| 77 | 77 | |
| 78 | 78 | global $wpdb; |
| 79 | 79 | $table_name = $wpdb->prefix . 'sync_basalam_payments'; |
| 80 | 80 | |
| 81 | + // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, PluginCheck.Security.DirectDB.UnescapedDBParameter -- Custom plugin table; identifier from $wpdb->prefix, not user input. | |
| 81 | 82 | $invoice_id = $wpdb->get_var( |
| 82 | 83 | $wpdb->prepare( |
| 83 | 84 | "SELECT invoice_id FROM {$table_name} WHERE order_id = %d", |
| 84 | 85 | $orderId |
