eg-attachments

描述

此插件已于 2024 年 3 月 7 日 关闭,无法下载。 此关闭是暂时的,有待全面审核。

评价

2017 年 4 月 27 日 1 回复
In database query inside a plugin file is not as per the standard WordPress queries. In file "\eg-attachments\inc\eg-attachments-public.inc.php" there is a function "record_click". In this function author is using below query: $sql = $wpdb->prepare('SELECT click_id,clicks_number FROM wp_eg_attachments_clicks WHERE click_date=CURRENT_DATE() AND attach_id=%d AND post_id=%d', $attach_id, $parent_id); Just look at the query, author is using “wp_eg_attachments_clicks” for a table. Here table prefix for that table is “wp_” which is not dynamic. Author should use something like below: $sql = $wpdb->prepare('SELECT click_id,clicks_number FROM '.$wpdb->prefix.'eg_attachments_clicks WHERE click_date=CURRENT_DATE() AND attach_id=%d AND post_id=%d', $attach_id, $parent_id); In place of "wp_" we should always use "$wpdb->prefix" in our queries so that our query will not break even change of table prefix by the user from wp-config.php file. Request to author, please update it in your next release. Thanks, Sunil Chaudhary
阅读所有8条评价

贡献者及开发者

“EG-Attachments” 是开源软件。 以下人员对此插件做出了贡献。

贡献者

将“EG-Attachments”翻译成您的语言。

对开发感兴趣吗?

您可以浏览代码,查看SVN仓库,或通过RSS订阅开发日志