Changeset 3332

Timestamp:

06/11/2016 08:46:03 PM (9 years ago)

Author:

obenland

Message:

Plugin Directory: Fix a bug where plugin names in count query were escaped.

Introduced in [3329].

See #1571.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/list-table/class-plugin-posts.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/admin/list-table/class-plugin-posts.php

@@ -381 +381 @@
         }
 
-        if ( empty( $plugins ) ) {
-            $user_post_count = intval( $wpdb->get_var( $wpdb->prepare( "
-                SELECT COUNT( 1 )
-                FROM $wpdb->posts
-                WHERE post_type = %s
-                AND post_author = %d
-            ", $post_type, $current_user_id ) ) );
-
-        } else {
-            $user_post_count = intval( $wpdb->get_var( ($wpdb->prepare( "
-                SELECT COUNT( 1 )
-                FROM $wpdb->posts
-                WHERE post_type = %s
-                AND ( post_author = %d OR post_name IN ( %s ) )
-            ", $post_type, $current_user_id, implode( ', ', $plugins ) ) ) ) );
-        }
+        $user_post_count_query = "
+            SELECT COUNT( 1 )
+            FROM $wpdb->posts
+            WHERE post_type = %s
+            AND post_author = %d
+        ";
+
+        if ( ! empty( $plugins ) ) {
+            $user_post_count_query = str_replace('AND post_author = %d', "AND ( post_author = %d OR post_name IN ( '" . implode( "','", $plugins ) . "' ) )", $user_post_count_query );
+        }
+
+        $user_post_count = intval( $wpdb->get_var( $wpdb->prepare( $user_post_count_query, $post_type, $current_user_id ) ) );
 
         // Subtract post types that are not included in the admin all list.