Verify and whitelist SQL escaping

wp-cli / search-replace-command

Searches/replaces strings in the database.

MIT License

57 stars 45 forks source link

Closed schlessera closed 5 years ago

schlessera commented 5 years ago

Because we are doing a lot of manual assembly of SQL strings, PHPCS & WPCS do not pick up on all the actual escaping that is happening.

I went through all statements and made sure that they all escape as needed before whitelisting them.