Tag Info

New answers tagged


there are two possible injection vectors, server side and client side server side - Just don't write your own SQL and use the more high level DB access APIs, in your case probably update_option. If you must to access the DB at lower level make sure the API use wpdb::prepare while generating the SQL, which is true for insert but not true for query which ...


solved it so: $part_brand = get_terms('brands', 'hide_empty=0'); <label for="part_brand">Бренд</label> <select name='part_brand' id='part_brand'> <option value='' <?php **$brand_names = wp_get_object_terms($post->ID, 'brands');** if (!count($brand_names)) echo "selected"; ?>>None</option> ...

Top 50 recent answers are included