Prepared whatnow? :) Nope, we don't use them yet. Bane of my life. We rely on all core calls and plugin authors escaping content before calling our DB layer.

Prepared whatnow? :) Nope, we don't use them yet. Bane of my life. We rely on all core calls and plugin authors escaping content before calling our DB layer. That has to change and will be part of the move to PDO. It's just a lot of faff work and there are always shinier things to work on. I've been secretly hoping that some kind soul will do it and issue a Pull Request. But maybe I should stop being lazy, bite the bullet and do it myself!