prefix."wpsp_class"; $classQuery = "select cid,c_name from $class_table"; if( $current_user_role=='teacher' ) { $cuserId = intval($current_user->ID); // $classQuery = "select cid,c_name from $class_table where teacher_id='".esc_sql($cuserId)."'"; $classQuery = $wpdb->prepare("SELECT cid,c_name FROM $class_table WHERE teacher_id = %d",$cuserId); } $classList = $wpdb->get_results( $classQuery ); ?> $classvalue ) { ?> prefix."wpsp_student"; // $studentList = $wpdb->get_results("select wp_usr_id,s_fname from $student_table where class_id='$classvalue->cid'"); $studentList = $wpdb->get_results($wpdb->prepare("SELECT wp_usr_id,s_fname FROM $student_table WHERE class_id = %s",$classvalue->cid)); foreach( $studentList as $studentkey=> $studentvalue ) { ?> s_fname); ?>