[email protected]

Forum Replies Created

Viewing 1 replies (of 1 total)

  • I’ve got the same problem and after some research I found the explantion:
    here

    What I did is manual edit of caticons-lite.class.php and change few calls to wpdbp.prepare i.e.

    $post_meta = $wpdb->get_var($wpdb->prepare("SELECT post_id FROM {$wpdb->prefix}postmeta WHERE meta_key = '".esc_sql($this->meta_key)."' AND meta_value=$cat_id"));

    would become:
    $post_meta = $wpdb->get_var($wpdb->prepare("SELECT post_id FROM {$wpdb->prefix}postmeta WHERE meta_key = %s AND meta_value= %d", esc_sql($this->meta_key),$cat_id));

    So instead of concatenating esc_sql() to query I would pass it as parameter. I think there was 2 or 3 queries like that in whole php file. After that plugin works perfectly fine.

Viewing 1 replies (of 1 total)