search

inboundnow / retired-leads

Track visitor activity, capture and manage incoming leads, and send collected emails to your email service provider for WordPress
http://www.inboundnow.com/leads/
11 stars 3 forks source link

Use the existing database connection for escaping. #117

Closed wggdeveloper closed 9 years ago

wggdeveloper commented 9 years ago

The call to mysql_real_escape_string can fail because it tries to initiate a new database connection (with missing credentials) instead of using the one that the wpdb object created.

To prevent situations like this one, the other mysql_... calls in the code should also be replaced with the appropriate method calls on the $wpdb global.