← All changes | extensions/wdk-cached-user-editor.php +8 -8 1.5.5 → 1.5.9 View file →

		@@ -31,12 +31,12 @@
31	31
32	32	$user_id_editor = $listing_data['user_id_editor'];
33	33
34	34	$data_update = array(
35		- 'user_id_editor_display_name'=> wdk_get_user_field ($user_id_editor, 'display_name'),
36		- 'user_id_editor_user_login'=>wdk_get_user_field ($user_id_editor, 'user_login'),
37		- 'user_id_editor_wdk_slug'=>wdk_get_user_field ($user_id_editor, 'wdk_slug'),
38		- 'user_id_editor_avatar'=>wdk_get_user_field ($user_id_editor, 'avatar'),
	35	+ 'user_id_editor_display_name'=> wdk_esc_sql(wdk_get_user_field ($user_id_editor, 'display_name'), true),
	36	+ 'user_id_editor_user_login'=>wdk_esc_sql(wdk_get_user_field ($user_id_editor, 'user_login'), true),
	37	+ 'user_id_editor_wdk_slug'=>wdk_esc_sql(wdk_get_user_field ($user_id_editor, 'wdk_slug'), true),
	38	+ 'user_id_editor_avatar'=>wdk_esc_sql(wdk_get_user_field ($user_id_editor, 'avatar'), true),
39	39	);
40	40
41	41	if(!empty($data_update))
42	42	$Winter_MVC_WDK->listing_m->insert($data_update, $id);
		@@ -48,12 +48,12 @@
48	48	$Winter_MVC_WDK->model('listing_m');
49	49	$Winter_MVC_WDK->load_helper('listing');
50	50
51	51	$data_update = array(
52		- 'user_id_editor_display_name'=> wdk_get_user_field ($user_id_editor, 'display_name'),
53		- 'user_id_editor_user_login'=>wdk_get_user_field ($user_id_editor, 'user_login'),
54		- 'user_id_editor_wdk_slug'=>wdk_get_user_field ($user_id_editor, 'wdk_slug'),
55		- 'user_id_editor_avatar'=>wdk_get_user_field ($user_id_editor, 'avatar'),
	52	+ 'user_id_editor_display_name'=> wdk_esc_sql(wdk_get_user_field ($user_id_editor, 'display_name'), true),
	53	+ 'user_id_editor_user_login'=>wdk_esc_sql(wdk_get_user_field ($user_id_editor, 'user_login'), true),
	54	+ 'user_id_editor_wdk_slug'=>wdk_esc_sql(wdk_get_user_field ($user_id_editor, 'wdk_slug'), true),
	55	+ 'user_id_editor_avatar'=>wdk_esc_sql(wdk_get_user_field ($user_id_editor, 'avatar'), true),
56	56	);
57	57
58	58	$Winter_MVC_WDK->db->update($Winter_MVC_WDK->listing_m->_table_name, $data_update, $user_id_editor, 'user_id_editor');
59	59	}