From 9fd7212b8b711fb9a86fe6dc6afc1c5039cbae49 Mon Sep 17 00:00:00 2001 From: Jordan Doyle Date: Thu, 27 Oct 2016 00:30:13 +0100 Subject: [PATCH] add docs to the real escape function --- src/Proxy/WordpressDatabase.php | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/src/Proxy/WordpressDatabase.php b/src/Proxy/WordpressDatabase.php index 1a9b3a9..4e42bf1 100644 --- a/src/Proxy/WordpressDatabase.php +++ b/src/Proxy/WordpressDatabase.php @@ -116,11 +116,10 @@ class WordpressDatabase extends wpdb } /** - * Real escape, using mysqli_real_escape_string() or mysql_real_escape_string(). + * Real escape, using PDO's quote function. * - * @see mysqli_real_escape_string() - * @see mysql_real_escape_string() - * @since 2.8.0 + * TODO: eventually swap this out for proper prepared + * statements rather than working around Wordpress' limitations. * * @param string $string to escape * -- libgit2 1.7.2