Edit File by line

[500] Fix | Delete

/**

[501] Fix | Delete

* Multisite Sites table.

[502] Fix | Delete

[503] Fix | Delete

* @since 3.0.0

[504] Fix | Delete

[505] Fix | Delete

* @var string

[506] Fix | Delete

[507] Fix | Delete

public $site;

[508] Fix | Delete

[509] Fix | Delete

/**

[510] Fix | Delete

* Multisite Sitewide Terms table.

[511] Fix | Delete

[512] Fix | Delete

* @since 3.0.0

[513] Fix | Delete

[514] Fix | Delete

* @var string

[515] Fix | Delete

[516] Fix | Delete

public $sitecategories;

[517] Fix | Delete

[518] Fix | Delete

/**

[519] Fix | Delete

* Multisite Site Metadata table.

[520] Fix | Delete

[521] Fix | Delete

* @since 3.0.0

[522] Fix | Delete

[523] Fix | Delete

* @var string

[524] Fix | Delete

[525] Fix | Delete

public $sitemeta;

[526] Fix | Delete

[527] Fix | Delete

/**

[528] Fix | Delete

* Format specifiers for DB columns.

[529] Fix | Delete

[530] Fix | Delete

* Columns not listed here default to %s. Initialized during WP load.

[531] Fix | Delete

* Keys are column names, values are format types: 'ID' => '%d'.

[532] Fix | Delete

[533] Fix | Delete

* @since 2.8.0

[534] Fix | Delete

[535] Fix | Delete

* @see wpdb::prepare()

[536] Fix | Delete

* @see wpdb::insert()

[537] Fix | Delete

* @see wpdb::update()

[538] Fix | Delete

* @see wpdb::delete()

[539] Fix | Delete

* @see wp_set_wpdb_vars()

[540] Fix | Delete

* @var array

[541] Fix | Delete

[542] Fix | Delete

public $field_types = array();

[543] Fix | Delete

[544] Fix | Delete

/**

[545] Fix | Delete

* Database table columns charset.

[546] Fix | Delete

[547] Fix | Delete

* @since 2.2.0

[548] Fix | Delete

[549] Fix | Delete

* @var string

[550] Fix | Delete

[551] Fix | Delete

public $charset;

[552] Fix | Delete

[553] Fix | Delete

/**

[554] Fix | Delete

* Database table columns collate.

[555] Fix | Delete

[556] Fix | Delete

* @since 2.2.0

[557] Fix | Delete

[558] Fix | Delete

* @var string

[559] Fix | Delete

[560] Fix | Delete

public $collate;

[561] Fix | Delete

[562] Fix | Delete

/**

[563] Fix | Delete

* Database Username.

[564] Fix | Delete

[565] Fix | Delete

* @since 2.9.0

[566] Fix | Delete

[567] Fix | Delete

* @var string

[568] Fix | Delete

[569] Fix | Delete

protected $dbuser;

[570] Fix | Delete

[571] Fix | Delete

/**

[572] Fix | Delete

* Database Password.

[573] Fix | Delete

[574] Fix | Delete

* @since 3.1.0

[575] Fix | Delete

[576] Fix | Delete

* @var string

[577] Fix | Delete

[578] Fix | Delete

protected $dbpassword;

[579] Fix | Delete

[580] Fix | Delete

/**

[581] Fix | Delete

* Database Name.

[582] Fix | Delete

[583] Fix | Delete

* @since 3.1.0

[584] Fix | Delete

[585] Fix | Delete

* @var string

[586] Fix | Delete

[587] Fix | Delete

protected $dbname;

[588] Fix | Delete

[589] Fix | Delete

/**

[590] Fix | Delete

* Database Host.

[591] Fix | Delete

[592] Fix | Delete

* @since 3.1.0

[593] Fix | Delete

[594] Fix | Delete

* @var string

[595] Fix | Delete

[596] Fix | Delete

protected $dbhost;

[597] Fix | Delete

[598] Fix | Delete

/**

[599] Fix | Delete

* Database handle.

[600] Fix | Delete

[601] Fix | Delete

* Possible values:

[602] Fix | Delete

[603] Fix | Delete

* - `mysqli` instance during normal operation

[604] Fix | Delete

* - `null` if the connection is yet to be made or has been closed

[605] Fix | Delete

* - `false` if the connection has failed

[606] Fix | Delete

[607] Fix | Delete

* @since 0.71

[608] Fix | Delete

[609] Fix | Delete

* @var mysqli|false|null

[610] Fix | Delete

[611] Fix | Delete

protected $dbh;

[612] Fix | Delete

[613] Fix | Delete

/**

[614] Fix | Delete

* A textual description of the last query/get_row/get_var call.

[615] Fix | Delete

[616] Fix | Delete

* @since 3.0.0

[617] Fix | Delete

[618] Fix | Delete

* @var string

[619] Fix | Delete

[620] Fix | Delete

public $func_call;

[621] Fix | Delete

[622] Fix | Delete

/**

[623] Fix | Delete

* Whether MySQL is used as the database engine.

[624] Fix | Delete

[625] Fix | Delete

* Set in wpdb::db_connect() to true, by default. This is used when checking

[626] Fix | Delete

* against the required MySQL version for WordPress. Normally, a replacement

[627] Fix | Delete

* database drop-in (db.php) will skip these checks, but setting this to true

[628] Fix | Delete

* will force the checks to occur.

[629] Fix | Delete

[630] Fix | Delete

* @since 3.3.0

[631] Fix | Delete

[632] Fix | Delete

* @var bool

[633] Fix | Delete

[634] Fix | Delete

public $is_mysql = null;

[635] Fix | Delete

[636] Fix | Delete

/**

[637] Fix | Delete

* A list of incompatible SQL modes.

[638] Fix | Delete

[639] Fix | Delete

* @since 3.9.0

[640] Fix | Delete

[641] Fix | Delete

* @var string[]

[642] Fix | Delete

[643] Fix | Delete

protected $incompatible_modes = array(

[644] Fix | Delete

'NO_ZERO_DATE',

[645] Fix | Delete

'ONLY_FULL_GROUP_BY',

[646] Fix | Delete

'STRICT_TRANS_TABLES',

[647] Fix | Delete

'STRICT_ALL_TABLES',

[648] Fix | Delete

'TRADITIONAL',

[649] Fix | Delete

'ANSI',

[650] Fix | Delete

);

[651] Fix | Delete

[652] Fix | Delete

/**

[653] Fix | Delete

* Backward compatibility, where wpdb::prepare() has not quoted formatted/argnum placeholders.

[654] Fix | Delete

[655] Fix | Delete

* This is often used for table/field names (before %i was supported), and sometimes string formatting, e.g.

[656] Fix | Delete

[657] Fix | Delete

* $wpdb->prepare( 'WHERE `%1$s` = "%2$s something %3$s" OR %1$s = "%4$-10s"', 'field_1', 'a', 'b', 'c' );

[658] Fix | Delete

[659] Fix | Delete

* But it's risky, e.g. forgetting to add quotes, resulting in SQL Injection vulnerabilities:

[660] Fix | Delete

[661] Fix | Delete

* $wpdb->prepare( 'WHERE (id = %1s) OR (id = %2$s)', $_GET['id'], $_GET['id'] ); // ?id=id

[662] Fix | Delete

[663] Fix | Delete

* This feature is preserved while plugin authors update their code to use safer approaches:

[664] Fix | Delete

[665] Fix | Delete

* $_GET['key'] = 'a`b';

[666] Fix | Delete

[667] Fix | Delete

* $wpdb->prepare( 'WHERE %1s = %s', $_GET['key'], $_GET['value'] ); // WHERE a`b = 'value'

[668] Fix | Delete

* $wpdb->prepare( 'WHERE `%1$s` = "%2$s"', $_GET['key'], $_GET['value'] ); // WHERE `a`b` = "value"

[669] Fix | Delete

[670] Fix | Delete

* $wpdb->prepare( 'WHERE %i = %s', $_GET['key'], $_GET['value'] ); // WHERE `a``b` = 'value'

[671] Fix | Delete

[672] Fix | Delete

* While changing to false will be fine for queries not using formatted/argnum placeholders,

[673] Fix | Delete

* any remaining cases are most likely going to result in SQL errors (good, in a way):

[674] Fix | Delete

[675] Fix | Delete

* $wpdb->prepare( 'WHERE %1$s = "%2$-10s"', 'my_field', 'my_value' );

[676] Fix | Delete

* true = WHERE my_field = "my_value "

[677] Fix | Delete

* false = WHERE 'my_field' = "'my_value '"

[678] Fix | Delete

[679] Fix | Delete

* But there may be some queries that result in an SQL Injection vulnerability:

[680] Fix | Delete

[681] Fix | Delete

* $wpdb->prepare( 'WHERE id = %1$s', $_GET['id'] ); // ?id=id

[682] Fix | Delete

[683] Fix | Delete

* So there may need to be a `_doing_it_wrong()` phase, after we know everyone can use

[684] Fix | Delete

* identifier placeholders (%i), but before this feature is disabled or removed.

[685] Fix | Delete

[686] Fix | Delete

* @since 6.2.0

[687] Fix | Delete

* @var bool

[688] Fix | Delete

[689] Fix | Delete

private $allow_unsafe_unquoted_parameters = true;

[690] Fix | Delete

[691] Fix | Delete

/**

[692] Fix | Delete

* Whether to use the mysqli extension over mysql. This is no longer used as the mysql

[693] Fix | Delete

* extension is no longer supported.

[694] Fix | Delete

[695] Fix | Delete

* Default true.

[696] Fix | Delete

[697] Fix | Delete

* @since 3.9.0

[698] Fix | Delete

* @since 6.4.0 This property was removed.

[699] Fix | Delete

* @since 6.4.1 This property was reinstated and its default value was changed to true.

[700] Fix | Delete

* The property is no longer used in core but may be accessed externally.

[701] Fix | Delete

[702] Fix | Delete

* @var bool

[703] Fix | Delete

[704] Fix | Delete

private $use_mysqli = true;

[705] Fix | Delete

[706] Fix | Delete

/**

[707] Fix | Delete

* Whether we've managed to successfully connect at some point.

[708] Fix | Delete

[709] Fix | Delete

* @since 3.9.0

[710] Fix | Delete

[711] Fix | Delete

* @var bool

[712] Fix | Delete

[713] Fix | Delete

private $has_connected = false;

[714] Fix | Delete

[715] Fix | Delete

/**

[716] Fix | Delete

* Time when the last query was performed.

[717] Fix | Delete

[718] Fix | Delete

* Only set when `SAVEQUERIES` is defined and truthy.

[719] Fix | Delete

[720] Fix | Delete

* @since 1.5.0

[721] Fix | Delete

[722] Fix | Delete

* @var float

[723] Fix | Delete

[724] Fix | Delete

public $time_start = null;

[725] Fix | Delete

[726] Fix | Delete

/**

[727] Fix | Delete

* The last SQL error that was encountered.

[728] Fix | Delete

[729] Fix | Delete

* @since 2.5.0

[730] Fix | Delete

[731] Fix | Delete

* @var WP_Error|string

[732] Fix | Delete

[733] Fix | Delete

public $error = null;

[734] Fix | Delete

[735] Fix | Delete

/**

[736] Fix | Delete

* Connects to the database server and selects a database.

[737] Fix | Delete

[738] Fix | Delete

* Does the actual setting up

[739] Fix | Delete

* of the class properties and connection to the database.

[740] Fix | Delete

[741] Fix | Delete

* @since 2.0.8

[742] Fix | Delete

[743] Fix | Delete

* @link https://core.trac.wordpress.org/ticket/3354

[744] Fix | Delete

[745] Fix | Delete

* @param string $dbuser Database user.

[746] Fix | Delete

* @param string $dbpassword Database password.

[747] Fix | Delete

* @param string $dbname Database name.

[748] Fix | Delete

* @param string $dbhost Database host.

[749] Fix | Delete

[750] Fix | Delete

public function __construct( $dbuser, $dbpassword, $dbname, $dbhost ) {

[751] Fix | Delete

if ( WP_DEBUG && WP_DEBUG_DISPLAY ) {

[752] Fix | Delete

$this->show_errors();

[753] Fix | Delete

}

[754] Fix | Delete

[755] Fix | Delete

$this->dbuser = $dbuser;

[756] Fix | Delete

$this->dbpassword = $dbpassword;

[757] Fix | Delete

$this->dbname = $dbname;

[758] Fix | Delete

$this->dbhost = $dbhost;

[759] Fix | Delete

[760] Fix | Delete

// wp-config.php creation will manually connect when ready.

[761] Fix | Delete

if ( defined( 'WP_SETUP_CONFIG' ) ) {

[762] Fix | Delete

return;

[763] Fix | Delete

}

[764] Fix | Delete

[765] Fix | Delete

$this->db_connect();

[766] Fix | Delete

}

[767] Fix | Delete

[768] Fix | Delete

/**

[769] Fix | Delete

* Makes private properties readable for backward compatibility.

[770] Fix | Delete

[771] Fix | Delete

* @since 3.5.0

[772] Fix | Delete

[773] Fix | Delete

* @param string $name The private member to get, and optionally process.

[774] Fix | Delete

* @return mixed The private member.

[775] Fix | Delete

[776] Fix | Delete

public function __get( $name ) {

[777] Fix | Delete

if ( 'col_info' === $name ) {

[778] Fix | Delete

$this->load_col_info();

[779] Fix | Delete

}

[780] Fix | Delete

[781] Fix | Delete

return $this->$name;

[782] Fix | Delete

}

[783] Fix | Delete

[784] Fix | Delete

/**

[785] Fix | Delete

* Makes private properties settable for backward compatibility.

[786] Fix | Delete

[787] Fix | Delete

* @since 3.5.0

[788] Fix | Delete

[789] Fix | Delete

* @param string $name The private member to set.

[790] Fix | Delete

* @param mixed $value The value to set.

[791] Fix | Delete

[792] Fix | Delete

public function __set( $name, $value ) {

[793] Fix | Delete

$protected_members = array(

[794] Fix | Delete

'col_meta',

[795] Fix | Delete

'table_charset',

[796] Fix | Delete

'check_current_query',

[797] Fix | Delete

'allow_unsafe_unquoted_parameters',

[798] Fix | Delete

);

[799] Fix | Delete

if ( in_array( $name, $protected_members, true ) ) {

[800] Fix | Delete

return;

[801] Fix | Delete

}

[802] Fix | Delete

$this->$name = $value;

[803] Fix | Delete

}

[804] Fix | Delete

[805] Fix | Delete

/**

[806] Fix | Delete

* Makes private properties check-able for backward compatibility.

[807] Fix | Delete

[808] Fix | Delete

* @since 3.5.0

[809] Fix | Delete

[810] Fix | Delete

* @param string $name The private member to check.

[811] Fix | Delete

* @return bool If the member is set or not.

[812] Fix | Delete

[813] Fix | Delete

public function __isset( $name ) {

[814] Fix | Delete

return isset( $this->$name );

[815] Fix | Delete

}

[816] Fix | Delete

[817] Fix | Delete

/**

[818] Fix | Delete

* Makes private properties un-settable for backward compatibility.

[819] Fix | Delete

[820] Fix | Delete

* @since 3.5.0

[821] Fix | Delete

[822] Fix | Delete

* @param string $name The private member to unset

[823] Fix | Delete

[824] Fix | Delete

public function __unset( $name ) {

[825] Fix | Delete

unset( $this->$name );

[826] Fix | Delete

}

[827] Fix | Delete

[828] Fix | Delete

/**

[829] Fix | Delete

* Sets $this->charset and $this->collate.

[830] Fix | Delete

[831] Fix | Delete

* @since 3.1.0

[832] Fix | Delete

[833] Fix | Delete

public function init_charset() {

[834] Fix | Delete

$charset = '';

[835] Fix | Delete

$collate = '';

[836] Fix | Delete

[837] Fix | Delete

if ( function_exists( 'is_multisite' ) && is_multisite() ) {

[838] Fix | Delete

$charset = 'utf8';

[839] Fix | Delete

if ( defined( 'DB_COLLATE' ) && DB_COLLATE ) {

[840] Fix | Delete

$collate = DB_COLLATE;

[841] Fix | Delete

} else {

[842] Fix | Delete

$collate = 'utf8_general_ci';

[843] Fix | Delete

}

[844] Fix | Delete

} elseif ( defined( 'DB_COLLATE' ) ) {

[845] Fix | Delete

$collate = DB_COLLATE;

[846] Fix | Delete

}

[847] Fix | Delete

[848] Fix | Delete

if ( defined( 'DB_CHARSET' ) ) {

[849] Fix | Delete

$charset = DB_CHARSET;

[850] Fix | Delete

}

[851] Fix | Delete

[852] Fix | Delete

$charset_collate = $this->determine_charset( $charset, $collate );

[853] Fix | Delete

[854] Fix | Delete

$this->charset = $charset_collate['charset'];

[855] Fix | Delete

$this->collate = $charset_collate['collate'];

[856] Fix | Delete

}

[857] Fix | Delete

[858] Fix | Delete

/**

[859] Fix | Delete

* Determines the best charset and collation to use given a charset and collation.

[860] Fix | Delete

[861] Fix | Delete

* For example, when able, utf8mb4 should be used instead of utf8.

[862] Fix | Delete

[863] Fix | Delete

* @since 4.6.0

[864] Fix | Delete

[865] Fix | Delete

* @param string $charset The character set to check.

[866] Fix | Delete

* @param string $collate The collation to check.

[867] Fix | Delete

* @return array {

[868] Fix | Delete

* The most appropriate character set and collation to use.

[869] Fix | Delete

[870] Fix | Delete

* @type string $charset Character set.

[871] Fix | Delete

* @type string $collate Collation.

[872] Fix | Delete

* }

[873] Fix | Delete

[874] Fix | Delete

public function determine_charset( $charset, $collate ) {

[875] Fix | Delete

if ( ( ! ( $this->dbh instanceof mysqli ) ) || empty( $this->dbh ) ) {

[876] Fix | Delete

return compact( 'charset', 'collate' );

[877] Fix | Delete

}

[878] Fix | Delete

[879] Fix | Delete

if ( 'utf8' === $charset ) {

[880] Fix | Delete

$charset = 'utf8mb4';

[881] Fix | Delete

}

[882] Fix | Delete

[883] Fix | Delete

if ( 'utf8mb4' === $charset ) {

[884] Fix | Delete

// _general_ is outdated, so we can upgrade it to _unicode_, instead.

[885] Fix | Delete

if ( ! $collate || 'utf8_general_ci' === $collate ) {

[886] Fix | Delete

$collate = 'utf8mb4_unicode_ci';

[887] Fix | Delete

} else {

[888] Fix | Delete

$collate = str_replace( 'utf8_', 'utf8mb4_', $collate );

[889] Fix | Delete

}

[890] Fix | Delete

}

[891] Fix | Delete

[892] Fix | Delete

// _unicode_520_ is a better collation, we should use that when it's available.

[893] Fix | Delete

if ( $this->has_cap( 'utf8mb4_520' ) && 'utf8mb4_unicode_ci' === $collate ) {

[894] Fix | Delete

$collate = 'utf8mb4_unicode_520_ci';

[895] Fix | Delete

}

[896] Fix | Delete

[897] Fix | Delete

return compact( 'charset', 'collate' );

[898] Fix | Delete

}

[899] Fix | Delete

[900] Fix | Delete

/**

[901] Fix | Delete

* Sets the connection's character set.

[902] Fix | Delete

[903] Fix | Delete

* @since 3.1.0

[904] Fix | Delete

[905] Fix | Delete

* @param mysqli $dbh The connection returned by `mysqli_connect()`.

[906] Fix | Delete

* @param string $charset Optional. The character set. Default null.

[907] Fix | Delete

* @param string $collate Optional. The collation. Default null.

[908] Fix | Delete

[909] Fix | Delete

public function set_charset( $dbh, $charset = null, $collate = null ) {

[910] Fix | Delete

if ( ! isset( $charset ) ) {

[911] Fix | Delete

$charset = $this->charset;

[912] Fix | Delete

}

[913] Fix | Delete

if ( ! isset( $collate ) ) {

[914] Fix | Delete

$collate = $this->collate;

[915] Fix | Delete

}

[916] Fix | Delete

if ( $this->has_cap( 'collation' ) && ! empty( $charset ) ) {

[917] Fix | Delete

$set_charset_succeeded = true;

[918] Fix | Delete

[919] Fix | Delete

if ( function_exists( 'mysqli_set_charset' ) && $this->has_cap( 'set_charset' ) ) {

[920] Fix | Delete

$set_charset_succeeded = mysqli_set_charset( $dbh, $charset );

[921] Fix | Delete

}

[922] Fix | Delete

[923] Fix | Delete

if ( $set_charset_succeeded ) {

[924] Fix | Delete

$query = $this->prepare( 'SET NAMES %s', $charset );

[925] Fix | Delete

if ( ! empty( $collate ) ) {

[926] Fix | Delete

$query .= $this->prepare( ' COLLATE %s', $collate );

[927] Fix | Delete

}

[928] Fix | Delete

mysqli_query( $dbh, $query );

[929] Fix | Delete

}

[930] Fix | Delete

}

[931] Fix | Delete

}

[932] Fix | Delete

[933] Fix | Delete

/**

[934] Fix | Delete

* Changes the current SQL mode, and ensures its WordPress compatibility.

[935] Fix | Delete

[936] Fix | Delete

* If no modes are passed, it will ensure the current MySQL server modes are compatible.

[937] Fix | Delete

[938] Fix | Delete

* @since 3.9.0

[939] Fix | Delete

[940] Fix | Delete

* @param array $modes Optional. A list of SQL modes to set. Default empty array.

[941] Fix | Delete

[942] Fix | Delete

public function set_sql_mode( $modes = array() ) {

[943] Fix | Delete

if ( empty( $modes ) ) {

[944] Fix | Delete

$res = mysqli_query( $this->dbh, 'SELECT @@SESSION.sql_mode' );

[945] Fix | Delete

[946] Fix | Delete

if ( empty( $res ) ) {

[947] Fix | Delete

return;

[948] Fix | Delete

}

[949] Fix | Delete

[950] Fix | Delete

$modes_array = mysqli_fetch_array( $res );

[951] Fix | Delete

[952] Fix | Delete

if ( empty( $modes_array[0] ) ) {

[953] Fix | Delete

return;

[954] Fix | Delete

}

[955] Fix | Delete

[956] Fix | Delete

$modes_str = $modes_array[0];

[957] Fix | Delete

[958] Fix | Delete

if ( empty( $modes_str ) ) {

[959] Fix | Delete

return;

[960] Fix | Delete

}

[961] Fix | Delete

[962] Fix | Delete

$modes = explode( ',', $modes_str );

[963] Fix | Delete

}

[964] Fix | Delete

[965] Fix | Delete

$modes = array_change_key_case( $modes, CASE_UPPER );

[966] Fix | Delete

[967] Fix | Delete

/**

[968] Fix | Delete

* Filters the list of incompatible SQL modes to exclude.

[969] Fix | Delete

[970] Fix | Delete

* @since 3.9.0

[971] Fix | Delete

[972] Fix | Delete

* @param array $incompatible_modes An array of incompatible modes.

[973] Fix | Delete

[974] Fix | Delete

$incompatible_modes = (array) apply_filters( 'incompatible_sql_modes', $this->incompatible_modes );

[975] Fix | Delete

[976] Fix | Delete

foreach ( $modes as $i => $mode ) {

[977] Fix | Delete

if ( in_array( $mode, $incompatible_modes, true ) ) {

[978] Fix | Delete

unset( $modes[ $i ] );

[979] Fix | Delete

}

[980] Fix | Delete

}

[981] Fix | Delete

[982] Fix | Delete

$modes_str = implode( ',', $modes );

[983] Fix | Delete

[984] Fix | Delete

mysqli_query( $this->dbh, "SET SESSION sql_mode='$modes_str'" );

[985] Fix | Delete

}

[986] Fix | Delete

[987] Fix | Delete

/**

[988] Fix | Delete

* Sets the table prefix for the WordPress tables.

[989] Fix | Delete

[990] Fix | Delete

* @since 2.5.0

[991] Fix | Delete

[992] Fix | Delete

* @param string $prefix Alphanumeric name for the new prefix.

[993] Fix | Delete

* @param bool $set_table_names Optional. Whether the table names, e.g. wpdb::$posts,

[994] Fix | Delete

* should be updated or not. Default true.

[995] Fix | Delete

* @return string|WP_Error Old prefix or WP_Error on error.

[996] Fix | Delete

[997] Fix | Delete

public function set_prefix( $prefix, $set_table_names = true ) {

[998] Fix | Delete

[999] Fix | Delete

123 4 5 6 ...9