wolfcms/wolfcms — Issue #387: Replace all non-prepared statements by properly prepared statements
Author: mvdkleijn
Created: 2011-10-11 13:58:47+00:00
State: open
Labels: ✘✘✘

Legacy code in Wolf CMS is in some places still using non-prepared SQL statements and/or $__CONN__. These should be replaced by proper prepared statements. Also, the following form should be used instead of $__CONN__:

$pdo = Record::getConnection();

Also, whenever a raw SQL statement is used, it should be evaluated to see if it can't be replaced by one of these:

Record::find()
Record::insert()
Record::update()
Record::delete()