30 ms·
It doesn't even use placeholders and prepared statements. What looks like prepared statements, for example, are not. Behold: https://github.com/WordPress/Word
by tyingq 4y ago
It doesn't even use placeholders and prepared statements. What looks like prepared statements, for example, are not.
Behold: https://github.com/WordPress/WordPress/blob/master/wp-includes/wp-db.php#L1395 https://github.com/WordPress/WordPress/blob/master/wp-includ...
- mickael-kerjean 4y agoThis is wild and hard to believe nobody has found a way to do some sql injection from there