Topic: Missing argument 2 for wpdb – BP Group Reviews · BuddyPress.org

Skip to:: Content; Pages; Categories; Search; Top; Bottom

Missing argument 2 for wpdb – BP Group Reviews

intimez
Participant

@intimez

4 months, 2 weeks ago

Originally posted for @boonebgorges here http://wordpress.org/support/plugin/bp-group-reviews

The error after activating:
Warning: Missing argument 2 for wpdb::prepare(), called in /public_html/wp-content/plugins/bp-group-reviews/bp-group-reviews.php on line 147 and defined in /public_html/wp-includes/wp-db.php on line 990

wp3.6 + bp 1.6.2

Does anyone know if this is being maintained? If not, is there another plugin that is similar?

Viewing 3 replies - 1 through 3 (of 3 total)

intimez
Participant

@intimez

4 months, 2 weeks ago

@boonebgorges possible SQL injection vulnerability

http://make.wordpress.org/core/2012/12/12/php-warning-missing-argument-2-for-wpdb-prepare/

John James Jacoby
Keymaster

@johnjamesjacoby

4 months, 2 weeks ago

This isn’t a security issue; it’s just using the function method incorrectly. It’s a warning because you have WP_DEBUG turned on. If you don’t want to see these warnings or aren’t confident what they mean, you’ll want to read up about PHP’s error reporting and how to interpret them.

intimez
Participant

@intimez

4 months ago

Since I bumped into it, I thought it was better to post it as per Andrew Nacin so that @boonebgorges can review it.

… you may be exposing your users to a possible SQL injection vulnerability … Just be sure to send a link to this post to the developer of the theme or plugin referenced in the error. …

Sounds like it is safe to use

Sorry for any confusion @johnjamesjacoby

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.