@nacin
Active 5 years ago
-
Andrea Fercia replied to the topic bp live notification plugin in the forum Third Party Plugins 10 years, 12 months ago
hi @jigesh
yes you’re right also @nacin says in his post “You should insteadthequery directly, as there are no inputs”.
So as long as you don’t have user inputs to sanitize, you’re safe.Btw the latest version 1.0.4 of the plugin already solved this, keeping prepare and correctly passing at least 1 argument on both cases (there are 2 query with…[Read more]