| @@ -152,9 +152,11 @@ | ||
| 152 | 152 | return false; |
| 153 | 153 | } |
| 154 | 154 | |
| 155 | 155 | if(!isset($existing_fields[$column_name])) |
| 156 | + // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared | |
| 156 | 157 | $query_result = $wpdb->query( $sql ); |
| 158 | + | |
| 157 | 159 | } |
| 158 | 160 | |
| 159 | 161 | // Create table column for new added or edited fields |
| 160 | 162 | public function delete_table_column($field_data, $field_id) |
| @@ -163,12 +165,14 @@ | ||
| 163 | 165 | |
| 164 | 166 | $table = $wpdb->prefix . 'wdk_listings_fields'; |
| 165 | 167 | $column_name = 'field_'.$field_id.'_'.wmvc_show_data('field_type',$field_data); |
| 166 | 168 | |
| 167 | - $sql = "ALTER TABLE `{$table}` | |
| 168 | - DROP `$column_name`;"; | |
| 169 | - | |
| 170 | - $query_result = $wpdb->query( $sql ); | |
| 169 | + $query_result = $wpdb->query( | |
| 170 | + $wpdb->prepare( | |
| 171 | + "ALTER TABLE `{$table}` DROP %s;", | |
| 172 | + $column_name | |
| 173 | + ) | |
| 174 | + ); | |
| 171 | 175 | } |
| 172 | 176 | |
| 173 | 177 | } |
| 174 | 178 | ?> |
