← All changes | includes/admin/class-privacy.php +1 -2 1.6.5 → 1.6.23 View file →

		@@ -209,10 +209,9 @@
209	209	*/
210	210	public static function get_form_payments( $user_id ) {
211	211	global $wpdb;
212	212
213		- $query = 'SELECT * FROM ' . $wpdb->prefix . 'weforms_payments' .
214		- ' WHERE user_id = ' . $user_id;
	213	+ $query = $wpdb->prepare( 'SELECT * FROM ' . $wpdb->prefix . 'weforms_payments WHERE user_id = %d', $user_id );
215	214
216	215	$results = $wpdb->get_results( $query );
217	216
218	217	return $results;