Mentions · Activity · Andrew Nacin · BuddyPress.org

Skip to:: Content; Pages; Categories; Search; Top; Bottom

Andrea Fercia replied to the topic bp live notification plugin in the forum Third Party Plugins 10 years, 12 months ago

hi @jigesh
yes you’re right also @nacin says in his post “You should instead ~~the~~ query directly, as there are no inputs”.
So as long as you don’t have user inputs to sanitize, you’re safe.

Btw the latest version 1.0.4 of the plugin already solved this, keeping prepare and correctly passing at least 1 argument on both cases (there are 2 query with…[Read more]