← All changes | includes/class-wpdirectorykit-activator.php +221 -141 1.5.3 → 1.5.9 View file →

		@@ -269,10 +269,9 @@
269	269	/* version 1.2.0 db install */
270	270	if ( get_site_option( 'wdk_db_version' ) < '1.3' ) {
271	271
272	272	$table_name = $wpdb->prefix . 'wdk_categories';
273		- $sql = "ALTER TABLE `$table_name` CHANGE `parent_id` `parent_id` INT(11) NULL DEFAULT '0'; ";
274		- $wpdb->query($sql);
	273	+ $wpdb->query($wpdb->prepare("ALTER TABLE `{$table_name}` CHANGE `parent_id` `parent_id` INT(11) NULL DEFAULT %d;", 0));
275	274
276	275	self::$db_version = 1.3;
277	276	/* udpate option with db version */
278	277	}
		@@ -280,14 +279,18 @@
280	279	/* version 1.2.0 db install */
281	280	if ( get_site_option( 'wdk_db_version' ) < '1.4' ) {
282	281
283	282	$table_name = $wpdb->prefix . 'wdk_listings';
284		- $sql = "ALTER TABLE `$table_name` ADD `is_approved` INT(1) NULL DEFAULT NULL AFTER `is_activated`; ";
285		- $wpdb->query($sql);
	283	+ $wpdb->query($wpdb->prepare(
	284	+ "ALTER TABLE `{$table_name}` ADD `is_approved` INT(1) NULL DEFAULT NULL AFTER `is_activated`;"
	285	+ ));
	286	+
	287	+ $wpdb->query($wpdb->prepare(
	288	+ "UPDATE `{$table_name}` SET `is_approved` = %d",
	289	+ 1
	290	+ ));
	291	+
286	292
287		- $sql = "UPDATE `$table_name` SET `is_approved` = '1'";
288		- $wpdb->query($sql);
289		-
290	293	self::$db_version = 1.4;
291	294	/* udpate option with db version */
292	295	}
293	296
		@@ -293,10 +296,12 @@
293	296
294	297	if ( get_site_option( 'wdk_db_version' ) < '1.5' ) {
295	298
296	299	$table_name = $wpdb->prefix . 'wdk_listings';
297		- $sql = "ALTER TABLE `$table_name` ADD `date_package_expire` DATETIME NULL AFTER `hubspot_id`, ADD `package_id` INT NULL AFTER `date_package_expire`; ";
298		- $wpdb->query($sql);
	300	+ $wpdb->query($wpdb->prepare(
	301	+ "ALTER TABLE `{$table_name}` ADD `date_package_expire` DATETIME NULL AFTER `hubspot_id`, ADD `package_id` INT NULL AFTER `date_package_expire`;"
	302	+ ));
	303	+
299	304
300	305	self::$db_version = 1.5;
301	306	/* udpate option with db version */
302	307	}
		@@ -303,10 +308,11 @@
303	308
304	309	if ( get_site_option( 'wdk_db_version' ) < '1.6' ) {
305	310
306	311	$table_name = $wpdb->prefix . 'wdk_categories';
307		- $sql = "ALTER TABLE `$table_name` ADD `marker_image_id` int(11) DEFAULT NULL";
308		- $wpdb->query($sql);
	312	+ $wpdb->query($wpdb->prepare(
	313	+ "ALTER TABLE `{$table_name}` ADD `marker_image_id` int(11) DEFAULT NULL"));
	314	+
309	315
310	316	self::$db_version = 1.6;
311	317	/* udpate option with db version */
312	318	}
		@@ -313,10 +319,12 @@
313	319
314	320	if ( get_site_option( 'wdk_db_version' ) < '1.7' ) {
315	321
316	322	$table_name = $wpdb->prefix . 'wdk_listings';
317		- $sql = "ALTER TABLE `$table_name` ADD `listing_images_path` VARCHAR(200) DEFAULT ''";
318		- $wpdb->query($sql);
	323	+ $wpdb->query($wpdb->prepare(
	324	+ "ALTER TABLE `{$table_name}` ADD `listing_images_path` VARCHAR(200) DEFAULT ''"
	325	+ ));
	326	+
319	327
320	328	// TODO: this column content should be generated based on listing_images or old client may have issues after update
321	329
322	330	self::$db_version = 1.7;
		@@ -325,10 +333,12 @@
325	333
326	334	if ( get_site_option( 'wdk_db_version' ) < '1.8' ) {
327	335
328	336	$table_name = $wpdb->prefix . 'wdk_listings';
329		- $sql = "ALTER TABLE `$table_name` ADD `subscription_id` INT NULL; ";
330		- $wpdb->query($sql);
	337	+ $wpdb->query($wpdb->prepare(
	338	+ "ALTER TABLE `{$table_name}` ADD `subscription_id` INT NULL;"
	339	+ ));
	340	+
331	341
332	342	self::$db_version = 1.8;
333	343	/* udpate option with db version */
334	344	}
		@@ -335,10 +345,12 @@
335	345
336	346	if ( get_site_option( 'wdk_db_version' ) < '1.9' ) {
337	347
338	348	$table_name = $wpdb->prefix . 'wdk_fields';
339		- $sql = "ALTER TABLE `$table_name` ADD `is_price_format` tinyint(1) DEFAULT NULL; ";
340		- $wpdb->query($sql);
	349	+ $wpdb->query($wpdb->prepare(
	350	+ "ALTER TABLE `{$table_name}` ADD `is_price_format` tinyint(1) DEFAULT NULL;"
	351	+ ));
	352	+
341	353
342	354	self::$db_version = 1.9;
343	355	/* udpate option with db version */
344	356	}
		@@ -345,10 +357,12 @@
345	357
346	358	if ( get_site_option( 'wdk_db_version' ) < '2.0' ) {
347	359
348	360	$table_name = $wpdb->prefix . 'wdk_resultitem';
349		- $sql = "ALTER TABLE `$table_name` ADD `is_multiline_enabled` tinyint(1) DEFAULT NULL; ";
350		- $wpdb->query($sql);
	361	+ $wpdb->query($wpdb->prepare(
	362	+ "ALTER TABLE `{$table_name}` ADD `is_multiline_enabled` tinyint(1) DEFAULT NULL;"
	363	+ ));
	364	+
351	365
352	366	self::$db_version = 2.0;
353	367	/* udpate option with db version */
354	368	}
		@@ -355,25 +369,27 @@
355	369
356	370	if ( get_site_option( 'wdk_db_version' ) < '2.1' ) {
357	371
358	372	$table_name = $wpdb->prefix . 'wdk_listings';
359		- $sql = "ALTER TABLE `$table_name` ADD `user_id_editor` INT DEFAULT NULL;";
360		- $wpdb->query($sql);
	373	+ $wpdb->query($wpdb->prepare(
	374	+ "ALTER TABLE `{$table_name}` ADD `user_id_editor` INT DEFAULT NULL;"
	375	+ ));
361	376
362	377	$table_user_name = $wpdb->prefix . 'wdk_listings_users';
363	378
364	379	/* copy agents to new column */
365		- $sql = "UPDATE
366		- `$table_name` table_listings ,
367		- `$table_user_name` table_users
368		- SET
369		- table_listings.user_id_editor = table_users.user_id
370		- WHERE
371		- table_listings.post_id = table_users.post_id;";
372		- $wpdb->query($sql);
	380	+ $wpdb->query($wpdb->prepare(
	381	+ "UPDATE %1\$s table_listings, %2\$s table_users
	382	+ SET table_listings.user_id_editor = table_users.user_id
	383	+ WHERE table_listings.post_id = table_users.post_id;",
	384	+ $table_name,
	385	+ $table_user_name
	386	+ ));
373	387
374		- $sql = "TRUNCATE TABLE `$table_user_name`";
375		- $wpdb->query($sql);
	388	+ $wpdb->query($wpdb->prepare(
	389	+ "TRUNCATE TABLE `{$table_name}`"
	390	+ ));
	391	+
376	392
377	393	self::$db_version = 2.1;
378	394	/* udpate option with db version */
379	395	}
		@@ -380,35 +396,42 @@
380	396
381	397	if ( get_site_option( 'wdk_db_version' ) < '2.2' ) {
382	398
383	399	$table_name = $wpdb->prefix . 'wdk_locations';
384		- $sql = "ALTER TABLE `$table_name` ADD `level_0_id` INT DEFAULT NULL;";
385		- $wpdb->query($sql);
	400	+ $wpdb->query($wpdb->prepare(
	401	+ "ALTER TABLE `{$table_name}` ADD `level_0_id` INT DEFAULT NULL;"
	402	+ ));
386	403
387	404	$table_name = $wpdb->prefix . 'wdk_categories';
388		- $sql = "ALTER TABLE `$table_name` ADD `level_0_id` INT DEFAULT NULL;";
389		- $wpdb->query($sql);
	405	+ $wpdb->query($wpdb->prepare(
	406	+ "ALTER TABLE `{$table_name}` ADD `level_0_id` INT DEFAULT NULL;"
	407	+ ));
390	408
391		-
392	409	$table_name = $wpdb->prefix . 'wdk_listings_locations';
393		- $sql = "CREATE TABLE IF NOT EXISTS `$table_name` (
	410	+ $sql = $wpdb->prepare(
	411	+ "CREATE TABLE IF NOT EXISTS `{$table_name}` (
394	412	`idlistings_locations` int(11) NOT NULL AUTO_INCREMENT,
395	413	`location_id` int DEFAULT NULL,
396	414	`post_id` int DEFAULT NULL,
397		- PRIMARY KEY (idlistings_locations)
398		- ) $charset_collate;";
	415	+ PRIMARY KEY (idlistings_locations)
	416	+ ) $charset_collate;"
	417	+ );
399	418	dbDelta( $sql );
400	419
401	420	$table_name = $wpdb->prefix . 'wdk_listings_categories';
402		- $sql = "CREATE TABLE IF NOT EXISTS `$table_name` (
	421	+ $sql = $wpdb->prepare(
	422	+ "CREATE TABLE IF NOT EXISTS `{$table_name}` (
403	423	`idlistings_categories` int(11) NOT NULL AUTO_INCREMENT,
404	424	`category_id` int DEFAULT NULL,
405	425	`post_id` int DEFAULT NULL,
406		- PRIMARY KEY (idlistings_categories)
407		- ) $charset_collate;";
	426	+ PRIMARY KEY (idlistings_categories)
	427	+ ) $charset_collate;"
	428	+ );
408	429	dbDelta( $sql );
409	430
	431	+
410	432
	433	+
411	434	self::$db_version = 2.2;
412	435	/* udpate option with db version */
413	436	}
414	437
		@@ -414,10 +437,12 @@
414	437
415	438	if ( get_site_option( 'wdk_db_version' ) < '2.3' ) {
416	439
417	440	$table_name = $wpdb->prefix . 'wdk_listings';
418		- $sql = "ALTER TABLE `$table_name` ADD `listing_plans_documents` text DEFAULT '';";
419		- $wpdb->query($sql);
	441	+ $wpdb->query($wpdb->prepare(
	442	+ "ALTER TABLE `{$table_name}` ADD `listing_plans_documents` text DEFAULT '';"
	443	+ ));
	444	+
420	445
421	446	self::$db_version = 2.3;
422	447	/* udpate option with db version */
423	448	}
		@@ -424,10 +449,12 @@
424	449
425	450	if ( get_site_option( 'wdk_db_version' ) < '2.4' ) {
426	451
427	452	$table_name = $wpdb->prefix . 'wdk_resultitem';
428		- $sql = "ALTER TABLE `$table_name` ADD `is_label_disable` INT(1) NULL DEFAULT NULL";
429		- $wpdb->query($sql);
	453	+ $wpdb->query($wpdb->prepare(
	454	+ "ALTER TABLE `{$table_name}` ADD `is_label_disable` INT(1) NULL DEFAULT NULL"
	455	+ ));
	456	+
430	457
431	458	self::$db_version = 2.4;
432	459	/* udpate option with db version */
433	460	}
		@@ -434,14 +461,16 @@
434	461
435	462	if ( get_site_option( 'wdk_db_version' ) < '2.5' ) {
436	463
437	464	$table_name = $wpdb->prefix . 'wdk_listings';
438		- $sql = "ALTER TABLE `$table_name` ADD `categories_list` VARCHAR(128) DEFAULT ''";
439		- $wpdb->query($sql);
	465	+ $wpdb->query($wpdb->prepare(
	466	+ "ALTER TABLE `{$table_name}` ADD `categories_list` VARCHAR(128) DEFAULT ''"
	467	+ ));
440	468
441		- $table_name = $wpdb->prefix . 'wdk_listings';
442		- $sql = "ALTER TABLE `$table_name` ADD `locations_list` VARCHAR(128) DEFAULT ''";
443		- $wpdb->query($sql);
	469	+ $wpdb->query($wpdb->prepare(
	470	+ "ALTER TABLE `{$table_name}` ADD `locations_list` VARCHAR(128) DEFAULT ''"
	471	+ ));
	472	+
444	473
445	474
446	475	self::$db_version = 2.5;
447	476	/* udpate option with db version */
		@@ -449,11 +478,14 @@
449	478
450	479	if ( get_site_option( 'wdk_db_version' ) < '2.6' ) {
451	480
452	481	$table_name = $wpdb->prefix . 'wdk_fields';
	482	+ $wpdb->query($wpdb->prepare(
	483	+ "UPDATE `{$table_name}` SET `is_visible_frontend` = %d",
	484	+ 1
	485	+ ));
453	486
454		- $sql = "UPDATE `$table_name` SET `is_visible_frontend` = '1'";
455		- $wpdb->query($sql);
	487	+
456	488
457	489	self::$db_version = 2.6;
458	490	/* udpate option with db version */
459	491	}
		@@ -459,10 +491,12 @@
459	491	}
460	492
461	493	if ( get_site_option( 'wdk_db_version' ) < '2.7' ) {
462	494	$table_name = $wpdb->prefix . 'wdk_listings';
463		- $sql = "ALTER TABLE `$table_name` ADD `listing_images_path_medium` VARCHAR(250) DEFAULT ''";
464		- $wpdb->query($sql);
	495	+ $wpdb->query($wpdb->prepare(
	496	+ "ALTER TABLE `{$table_name}` ADD `listing_images_path_medium` VARCHAR(250) DEFAULT ''"
	497	+ ));
	498	+
465	499
466	500	self::$db_version = 2.7;
467	501	/* udpate option with db version */
468	502	}
		@@ -471,9 +505,9 @@
471	505	// Main table for visited pages
472	506
473	507	$table_name = $wpdb->prefix . 'wdk_dependfields';
474	508
475		- $sql = "CREATE TABLE IF NOT EXISTS $table_name (
	509	+ $sql = $sql = "CREATE TABLE IF NOT EXISTS `{$table_name}` (
476	510	`iddependfields` int(11) NOT NULL AUTO_INCREMENT,
477	511	`main_field` varchar(60) DEFAULT '',
478	512	`field_id` int(11) DEFAULT NULL,
479	513	`hidden_fields_list` varchar(256) DEFAULT '',
		@@ -489,9 +523,17 @@
489	523
490	524	if ( get_site_option( 'wdk_db_version' ) < '2.9' ) {
491	525	// Main table for visited pages
492	526	global $wpdb;
493		- $wpdb->query('UPDATE '.$wpdb->prefix . 'wdk_fields SET is_price_format = 1 WHERE (idfield=6 OR idfield=7) AND field_type="NUMBER"');
	527	+ $table_name = $wpdb->prefix . 'wdk_fields';
	528	+ $wpdb->query($wpdb->prepare(
	529	+ "UPDATE `{$table_name}` SET is_price_format = %d WHERE (idfield=%d OR idfield=%d) AND field_type=%s",
	530	+ 1,
	531	+ 6,
	532	+ 7,
	533	+ 'NUMBER'
	534	+ ));
	535	+
494	536	self::$db_version = 2.9;
495	537	/* udpate option with db version */
496	538	}
497	539
		@@ -498,10 +540,13 @@
498	540	if ( get_site_option( 'wdk_db_version' ) < '3.0' ) {
499	541
500	542	$table_name = $wpdb->prefix . 'wdk_fields';
501	543
502		- $sql = "UPDATE `$table_name` SET `is_visible_dashboard` = '1'";
503		- $wpdb->query($sql);
	544	+ $wpdb->query($wpdb->prepare(
	545	+ "UPDATE `{$table_name}` SET is_visible_dashboard = %d",
	546	+ 1
	547	+ ));
	548	+
504	549
505	550	self::$db_version = 3.0;
506	551	/* udpate option with db version */
507	552	}
		@@ -508,21 +553,28 @@
508	553
509	554	if ( get_site_option( 'wdk_db_version' ) < '3.1' ) {
510	555
511	556	$table_name = $wpdb->prefix . 'wdk_locations';
512		- $sql = "ALTER TABLE `$table_name` ADD `icon_path` VARCHAR(100) DEFAULT ''";
513		- $wpdb->query($sql);
514		- $sql = "ALTER TABLE `$table_name` ADD `image_path` VARCHAR(100) DEFAULT ''";
515		- $wpdb->query($sql);
	557	+ $wpdb->query($wpdb->prepare(
	558	+ "ALTER TABLE `{$table_name}` ADD `icon_path` VARCHAR(100) DEFAULT ''"
	559	+ ));
	560	+ $wpdb->query($wpdb->prepare(
	561	+ "ALTER TABLE `{$table_name}` ADD `image_path` VARCHAR(100) DEFAULT ''"
	562	+ ));
516	563
517	564	$table_name = $wpdb->prefix . 'wdk_categories';
518		- $sql = "ALTER TABLE `$table_name` ADD `icon_path` VARCHAR(100) DEFAULT ''";
519		- $wpdb->query($sql);
520		- $sql = "ALTER TABLE `$table_name` ADD `image_path` VARCHAR(100) DEFAULT ''";
521		- $wpdb->query($sql);
522		- $sql = "ALTER TABLE `$table_name` ADD `marker_image_path` VARCHAR(100) DEFAULT ''";
523		- $wpdb->query($sql);
	565	+ $wpdb->query($wpdb->prepare(
	566	+ "ALTER TABLE `{$table_name}` ADD `icon_path` VARCHAR(100) DEFAULT ''"
	567	+ ));
	568	+ $wpdb->query($wpdb->prepare(
	569	+ "ALTER TABLE `{$table_name}` ADD `image_path` VARCHAR(100) DEFAULT ''"
	570	+ ));
	571	+ $wpdb->query($wpdb->prepare(
	572	+ "ALTER TABLE `{$table_name}` ADD `marker_image_path` VARCHAR(100) DEFAULT ''"
	573	+ ));
524	574
	575	+
	576	+
525	577	// TODO: this column content should be generated based on listing_images or old client may have issues after update
526	578
527	579	self::$db_version = 3.1;
528	580	/* udpate option with db version */
		@@ -532,9 +584,9 @@
532	584	// Main table for visited pages
533	585
534	586	$table_name = $wpdb->prefix . 'wdk_token';
535	587
536		- $sql = "CREATE TABLE IF NOT EXISTS $table_name (
	588	+ $sql = "CREATE TABLE IF NOT EXISTS `{$table_name}` (
537	589	`idtoken` int(11) NOT NULL AUTO_INCREMENT,
538	590	`token` varchar(60) UNIQUE DEFAULT '',
539	591	`user_id` int(11) DEFAULT NULL,
540	592	`user_email` varchar(256) DEFAULT '',
		@@ -560,18 +612,21 @@
560	612	if ( get_site_option( 'wdk_db_version' ) < '3.4' ) {
561	613	// Main table for visited pages
562	614
563	615	$table_name = $wpdb->prefix . 'wdk_locations';
564		- $sql = "ALTER TABLE `$table_name` ADD `related_svg_map` varchar(64) DEFAULT NULL;";
565		- $wpdb->query($sql);
	616	+ $wpdb->query($wpdb->prepare(
	617	+ "ALTER TABLE `{$table_name}` ADD `related_svg_map` varchar(64) DEFAULT NULL;"
	618	+ ));
566	619
567	620	$table_name = $wpdb->prefix . 'wdk_locations';
568		- $sql = "ALTER TABLE `$table_name` ADD `related_svg_map_location` varchar(128) DEFAULT NULL;";
569		- $wpdb->query($sql);
	621	+ $wpdb->query($wpdb->prepare(
	622	+ "ALTER TABLE `{$table_name}` ADD `related_svg_map_location` varchar(128) DEFAULT NULL;"
	623	+ ));
570	624
571	625	$table_name = $wpdb->prefix . 'wdk_fields';
572		- $sql = "ALTER TABLE `$table_name` CHANGE `values_list` `values_list` TEXT NULL DEFAULT NULL;";
573		- $wpdb->query($sql);
	626	+ $wpdb->query($wpdb->prepare(
	627	+ "ALTER TABLE `{$table_name}` CHANGE `values_list` `values_list` TEXT NULL DEFAULT NULL;"
	628	+ ));
574	629
575	630	self::$db_version = 3.4;
576	631	/* udpate option with db version */
577	632	}
		@@ -579,26 +634,31 @@
579	634	if ( get_site_option( 'wdk_db_version' ) < '3.5' ) {
580	635	// Main table for visited pages
581	636
582	637	$table_name = $wpdb->prefix . 'wdk_categories';
583		- $sql = "ALTER TABLE `$table_name` ADD `category_color` varchar(32) DEFAULT NULL;";
584		- $wpdb->query($sql);
	638	+ $wpdb->query($wpdb->prepare(
	639	+ "ALTER TABLE `{$table_name}` ADD `category_color` varchar(32) DEFAULT NULL;"
	640	+ ));
585	641
586	642	$table_name = $wpdb->prefix . 'wdk_fields';
587		- $sql = "ALTER TABLE `$table_name` ADD `validation` varchar(64) DEFAULT NULL;";
588		- $wpdb->query($sql);
	643	+ $wpdb->query($wpdb->prepare(
	644	+ "ALTER TABLE `{$table_name}` ADD `validation` varchar(64) DEFAULT NULL;"
	645	+ ));
589	646
590	647	$table_name = $wpdb->prefix . 'wdk_fields';
591		- $sql = "ALTER TABLE `$table_name` ADD `min_length` INT(3) DEFAULT NULL;";
592		- $wpdb->query($sql);
	648	+ $wpdb->query($wpdb->prepare(
	649	+ "ALTER TABLE `{$table_name}` ADD `min_length` INT(3) DEFAULT NULL;"
	650	+ ));
593	651
594	652	$table_name = $wpdb->prefix . 'wdk_listings';
595		- $sql = "ALTER TABLE `$table_name` CHANGE `listing_images_path` `listing_images_path` TEXT DEFAULT '';";
596		- $wpdb->query($sql);
	653	+ $wpdb->query($wpdb->prepare(
	654	+ "ALTER TABLE `{$table_name}` CHANGE `listing_images_path` `listing_images_path` TEXT DEFAULT '';"
	655	+ ));
597	656
598	657	$table_name = $wpdb->prefix . 'wdk_listings';
599		- $sql = "ALTER TABLE `$table_name` CHANGE `listing_images_path_medium` `listing_images_path_medium` TEXT DEFAULT '';";
600		- $wpdb->query($sql);
	658	+ $wpdb->query($wpdb->prepare(
	659	+ "ALTER TABLE `{$table_name}` CHANGE `listing_images_path_medium` `listing_images_path_medium` TEXT DEFAULT '';"
	660	+ ));
601	661
602	662	self::$db_version = 3.5;
603	663	/* udpate option with db version */
604	664	}
		@@ -606,18 +666,21 @@
606	666	if ( get_site_option( 'wdk_db_version' ) < '3.6' ) {
607	667
608	668	$table_name = $wpdb->prefix . 'wdk_fields';
609	669
610		- $sql = "UPDATE `$table_name` SET `is_visible_dashboard` = '1'";
611		- $wpdb->query($sql);
	670	+ $wpdb->query($wpdb->prepare(
	671	+ "UPDATE `{$table_name}` SET `is_visible_dashboard` = '1'"
	672	+ ));
612	673
613	674	$table_name = $wpdb->prefix . 'wdk_listings';
614		- $sql = "ALTER TABLE `$table_name` CHANGE `locations_list` `locations_list` TEXT DEFAULT '';";
615		- $wpdb->query($sql);
	675	+ $wpdb->query($wpdb->prepare(
	676	+ "ALTER TABLE `{$table_name}` CHANGE `locations_list` `locations_list` TEXT DEFAULT '';"
	677	+ ));
616	678
617	679	$table_name = $wpdb->prefix . 'wdk_listings';
618		- $sql = "ALTER TABLE `$table_name` CHANGE `categories_list` `categories_list` TEXT DEFAULT '';";
619		- $wpdb->query($sql);
	680	+ $wpdb->query($wpdb->prepare(
	681	+ "ALTER TABLE `{$table_name}` CHANGE `categories_list` `categories_list` TEXT DEFAULT '';"
	682	+ ));
620	683
621	684	self::$db_version = 3.6;
622	685	/* udpate option with db version */
623	686	}
		@@ -625,10 +688,11 @@
625	688	if ( get_site_option( 'wdk_db_version' ) < '3.7' ) {
626	689
627	690	$table_name = $wpdb->prefix . 'wdk_fields';
628	691
629		- $sql = "ALTER TABLE `$table_name` ADD `placeholder` varchar(128) DEFAULT NULL;";
630		- $wpdb->query($sql);
	692	+ $wpdb->query($wpdb->prepare(
	693	+ "ALTER TABLE `{$table_name}` ADD `placeholder` varchar(128) DEFAULT NULL;"
	694	+ ));
631	695
632	696	self::$db_version = 3.7;
633	697	/* udpate option with db version */
634	698	}
		@@ -635,10 +699,11 @@
635	699
636	700	if ( get_site_option( 'wdk_db_version' ) < '3.8' ) {
637	701
638	702	$table_name = $wpdb->prefix . 'wdk_messages';
639		- $sql = "ALTER TABLE `$table_name` ADD `is_notified` tinyint(1) DEFAULT NULL; ";
640		- $wpdb->query($sql);
	703	+ $wpdb->query($wpdb->prepare(
	704	+ "ALTER TABLE `{$table_name}` ADD `is_notified` tinyint(1) DEFAULT NULL; "
	705	+ ));
641	706
642	707	self::$db_version = 3.8;
643	708	/* udpate option with db version */
644	709	}
		@@ -646,9 +711,9 @@
646	711	if ( get_site_option( 'wdk_db_version' ) < '3.9' ) {
647	712
648	713	$table_name = $wpdb->prefix . 'wdk_users';
649	714
650		- $sql = "CREATE TABLE IF NOT EXISTS `$table_name` (
	715	+ $sql = "CREATE TABLE IF NOT EXISTS `{$table_name}` (
651	716	`idusers` int(11) NOT NULL AUTO_INCREMENT,
652	717	`cacheduser_user_id` int(11) DEFAULT NULL,
653	718	`cacheduser_profile_url` text DEFAULT NULL,
654	719	`cacheduser_display_name` text DEFAULT NULL,
		@@ -684,18 +749,19 @@
684	749
685	750	if ( get_site_option( 'wdk_db_version' ) < '4.0' ) {
686	751
687	752	$table_name = $wpdb->prefix . 'wdk_listings';
688		- $sql = "ALTER TABLE `$table_name` ADD `listing_related_ids` VARCHAR(512) DEFAULT ''";
689		- $wpdb->query($sql);
	753	+ $wpdb->query($wpdb->prepare(
	754	+ "ALTER TABLE `{$table_name}` ADD `listing_related_ids` VARCHAR(512) DEFAULT ''"
	755	+ ));
690	756
691		- $table_name = $wpdb->prefix . 'wdk_listings';
692		- $sql = "ALTER TABLE `$table_name` ADD `sublisting_order` INT(11) DEFAULT NULL";
693		- $wpdb->query($sql);
	757	+ $wpdb->query($wpdb->prepare(
	758	+ "ALTER TABLE `{$table_name}` ADD `sublisting_order` INT(11) DEFAULT NULL"
	759	+ ));
694	760
695		- $table_name = $wpdb->prefix . 'wdk_listings';
696		- $sql = "ALTER TABLE `$table_name` ADD `listing_parent_post_id` INT(11) DEFAULT NULL";
697		- $wpdb->query($sql);
	761	+ $wpdb->query($wpdb->prepare(
	762	+ "ALTER TABLE `{$table_name}` ADD `listing_parent_post_id` INT(11) DEFAULT NULL"
	763	+ ));
698	764
699	765	/* disable elmentor experement feature */
700	766	update_option( 'elementor_experiment-landing-pages', 'inactive' );
701	767	update_option( 'elementor_experiment-e_dom_optimization', 'inactive');
		@@ -706,10 +772,11 @@
706	772
707	773	if ( get_site_option( 'wdk_db_version' ) < '4.1' ) {
708	774
709	775	$table_name = $wpdb->prefix . 'wdk_dependfields';
710		- $sql = "ALTER TABLE `$table_name` CHANGE `hidden_fields_list` `hidden_fields_list` TEXT NULL DEFAULT NULL;";
711		- $wpdb->query($sql);
	776	+ $wpdb->query($wpdb->prepare(
	777	+ "ALTER TABLE `{$table_name}` CHANGE `hidden_fields_list` `hidden_fields_list` TEXT NULL DEFAULT NULL;"
	778	+ ));
712	779
713	780	self::$db_version = 4.1;
714	781	/* udpate option with db version */
715	782	}
		@@ -722,9 +789,10 @@
722	789
723	790	if ( get_site_option( 'wdk_db_version' ) < '4.3' ) {
724	791	$table_name = $wpdb->prefix . 'wdk_editlog';
725	792
726		- $sql = "CREATE TABLE IF NOT EXISTS `$table_name` (
	793	+ $sql = $wpdb->prepare(
	794	+ "CREATE TABLE IF NOT EXISTS `{$table_name}` (
727	795	`ideditlog` int(11) NOT NULL AUTO_INCREMENT,
728	796	`post_id` int(11) DEFAULT NULL,
729	797	`user_id` int(11) DEFAULT NULL,
730	798	`date` datetime DEFAULT NULL,
		@@ -730,9 +798,10 @@
730	798	`date` datetime DEFAULT NULL,
731	799	`ip` text DEFAULT NULL,
732	800	`comment` text DEFAULT NULL,
733	801	PRIMARY KEY (ideditlog)
734		- ) $charset_collate;";
	802	+ ) $charset_collate;"
	803	+ );
735	804
736	805	dbDelta( $sql );
737	806	self::$db_version = 4.3;
738	807	/* udpate option with db version */
		@@ -756,10 +825,11 @@
756	825	update_option( 'wdk_is_post_content_enable', '1');
757	826	update_option( 'wdk_is_alt_agent_enabled', '1');
758	827
759	828	$table_name = $wpdb->prefix . 'wdk_users';
760		- $sql = "ALTER TABLE `$table_name` ADD `cacheduser_agency_name` text DEFAULT ''";
761		- $wpdb->query($sql);
	829	+ $wpdb->query($wpdb->prepare(
	830	+ "ALTER TABLE `{$table_name}` ADD `cacheduser_agency_name` text DEFAULT ''"
	831	+ ));
762	832
763	833	self::$db_version = 4.5;
764	834	/* udpate option with db version */
765	835	}
		@@ -766,10 +836,11 @@
766	836
767	837	if ( get_site_option( 'wdk_db_version' ) < '4.6' ) {
768	838
769	839	$table_name = $wpdb->prefix . 'wdk_fields';
770		- $sql = "ALTER TABLE `$table_name` ADD `empty_value` text DEFAULT ''";
771		- $wpdb->query($sql);
	840	+ $wpdb->query($wpdb->prepare(
	841	+ "ALTER TABLE `{$table_name}` ADD `empty_value` text DEFAULT ''"
	842	+ ));
772	843
773	844	self::$db_version = 4.6;
774	845	/* udpate option with db version */
775	846	}
		@@ -776,10 +847,11 @@
776	847
777	848	if ( get_site_option( 'wdk_db_version' ) < '4.7' ) {
778	849
779	850	$table_name = $wpdb->prefix . 'wdk_fields';
780		- $sql = "ALTER TABLE `$table_name` ADD `date_format` text DEFAULT ''";
781		- $wpdb->query($sql);
	851	+ $wpdb->query($wpdb->prepare(
	852	+ "ALTER TABLE `{$table_name}` ADD `date_format` text DEFAULT ''"
	853	+ ));
782	854
783	855	self::$db_version = 4.7;
784	856	/* udpate option with db version */
785	857	}
		@@ -786,14 +858,16 @@
786	858
787	859	if ( get_site_option( 'wdk_db_version' ) < '4.8' ) {
788	860
789	861	$table_name = $wpdb->prefix . 'wdk_categories';
790		- $sql = "ALTER TABLE `$table_name` ADD `titles_for_search` text DEFAULT '';";
791		- $wpdb->query($sql);
	862	+ $wpdb->query($wpdb->prepare(
	863	+ "ALTER TABLE `{$table_name}` ADD `titles_for_search` text DEFAULT '';"
	864	+ ));
792	865
793	866	$table_name = $wpdb->prefix . 'wdk_locations';
794		- $sql = "ALTER TABLE `$table_name` ADD `titles_for_search` text DEFAULT '';";
795		- $wpdb->query($sql);
	867	+ $wpdb->query($wpdb->prepare(
	868	+ "ALTER TABLE `{$table_name}` ADD `titles_for_search` text DEFAULT '';"
	869	+ ));
796	870
797	871	self::$db_version = 4.8;
798	872	/* udpate option with db version */
799	873	}
		@@ -800,13 +874,15 @@
800	874
801	875	if ( get_site_option( 'wdk_db_version' ) < '4.9' ) {
802	876
803	877	$table_name = $wpdb->prefix . 'wdk_users';
804		- $sql = "ALTER TABLE `$table_name` ADD `cacheduser_user_login` text DEFAULT ''";
805		- $wpdb->query($sql);
	878	+ $wpdb->query($wpdb->prepare(
	879	+ "ALTER TABLE `{$table_name}` ADD `cacheduser_user_login` text DEFAULT ''"
	880	+ ));
806	881
807		- $sql = "ALTER TABLE `$table_name` ADD `cacheduser_wdk_slug` text DEFAULT ''";
808		- $wpdb->query($sql);
	882	+ $wpdb->query($wpdb->prepare(
	883	+ "ALTER TABLE `{$table_name}` ADD `cacheduser_wdk_slug` text DEFAULT ''"
	884	+ ));
809	885
810	886	self::$db_version = 4.9;
811	887	/* udpate option with db version */
812	888	}
		@@ -814,10 +890,11 @@
814	890
815	891	if ( get_site_option( 'wdk_db_version' ) < '5.0' ) {
816	892
817	893	$table_name = $wpdb->prefix . 'wdk_fields';
818		- $sql = "ALTER TABLE `$table_name` ADD `autosuggestion` varchar(64) DEFAULT NULL;";
819		- $wpdb->query($sql);
	894	+ $wpdb->query($wpdb->prepare(
	895	+ "ALTER TABLE `{$table_name}` ADD `autosuggestion` varchar(64) DEFAULT NULL;"
	896	+ ));
820	897
821	898	self::$db_version = 5.0;
822	899	/* udpate option with db version */
823	900	}
		@@ -824,26 +901,28 @@
824	901
825	902	if ( get_site_option( 'wdk_db_version' ) < '5.1' ) {
826	903
827	904	$table_name = $wpdb->prefix . 'wdk_resultitem';
828		- $sql = "ALTER TABLE `$table_name` ADD `is_show_agent_details` INT(1) NULL DEFAULT NULL";
829		- $wpdb->query($sql);
	905	+ $wpdb->query($wpdb->prepare(
	906	+ "ALTER TABLE `{$table_name}` ADD `is_show_agent_details` INT(1) NULL DEFAULT NULL"
	907	+ ));
830	908
831	909	$table_name = $wpdb->prefix . 'wdk_listings';
832		- $sql = "ALTER TABLE `$table_name` ADD `user_id_editor_display_name` VARCHAR(128) DEFAULT ''";
833		- $wpdb->query($sql);
	910	+ $wpdb->query($wpdb->prepare(
	911	+ "ALTER TABLE `{$table_name}` ADD `user_id_editor_display_name` VARCHAR(128) DEFAULT ''"
	912	+ ));
834	913
835		- $table_name = $wpdb->prefix . 'wdk_listings';
836		- $sql = "ALTER TABLE `$table_name` ADD `user_id_editor_user_login` VARCHAR(128) DEFAULT ''";
837		- $wpdb->query($sql);
	914	+ $wpdb->query($wpdb->prepare(
	915	+ "ALTER TABLE `{$table_name}` ADD `user_id_editor_user_login` VARCHAR(128) DEFAULT ''"
	916	+ ));
838	917
839		- $table_name = $wpdb->prefix . 'wdk_listings';
840		- $sql = "ALTER TABLE `$table_name` ADD `user_id_editor_wdk_slug` VARCHAR(128) DEFAULT ''";
841		- $wpdb->query($sql);
	918	+ $wpdb->query($wpdb->prepare(
	919	+ "ALTER TABLE `{$table_name}` ADD `user_id_editor_wdk_slug` VARCHAR(128) DEFAULT ''"
	920	+ ));
842	921
843		- $table_name = $wpdb->prefix . 'wdk_listings';
844		- $sql = "ALTER TABLE `$table_name` ADD `user_id_editor_avatar` VARCHAR(256) DEFAULT ''";
845		- $wpdb->query($sql);
	922	+ $wpdb->query($wpdb->prepare(
	923	+ "ALTER TABLE `{$table_name}` ADD `user_id_editor_avatar` VARCHAR(256) DEFAULT ''"
	924	+ ));
846	925
847	926	self::$db_version = 5.1;
848	927	/* udpate option with db version */
849	928	}
		@@ -850,10 +929,11 @@
850	929
851	930	if ( get_site_option( 'wdk_db_version' ) < '5.2' ) {
852	931
853	932	$table_name = $wpdb->prefix . 'wdk_listings';
854		- $sql = "ALTER TABLE `$table_name` ADD `counter_results_views` INT(111) DEFAULT 0";
855		- $wpdb->query($sql);
	933	+ $wpdb->query($wpdb->prepare(
	934	+ "ALTER TABLE `{$table_name}` ADD `counter_results_views` INT(111) DEFAULT 0"
	935	+ ));
856	936
857	937	self::$db_version = 5.2;
858	938	/* udpate option with db version */
859	939	}
		@@ -866,5 +946,5 @@
866	946	}
867	947
868	948	update_option( 'wdk_db_version', self::$db_version );
869	949	}
870		-}
	950	+}