Changeset 3326308
- Timestamp:
- 07/11/2025 01:36:18 PM (6 months ago)
- Location:
- dialbunny/tags/1.1.0/lib/views/dashboard/messages
- Files:
-
- 2 edited
-
default.php (modified) (1 diff)
-
messages.php (modified) (1 diff)
Legend:
- Unmodified
- Added
- Removed
-
dialbunny/tags/1.1.0/lib/views/dashboard/messages/default.php
r3326079 r3326308 59 59 } else { 60 60 // Direct database query used below – $wpdb->prepare() is always used to prevent SQL injection. 61 $opened_item = $wpdb->get_results( $wpdb->prepare("SELECT * FROM (SELECT *, ROW_NUMBER() OVER (PARTITION BY from_number ORDER BY created_at DESC) AS rn FROM {$wpdb->prefix}dialbunny_messages WHERE user = %d AND to_number = %s) AS ranked_messages WHERE rn = 1 ORDER BY created_at DESC LIMIT %d", $user_id,$managed_number, $limit)); // phpcs:ignore WordPress.DB.DirectDatabaseQuery61 $opened_item = $wpdb->get_results( $wpdb->prepare("SELECT * FROM (SELECT *, ROW_NUMBER() OVER (PARTITION BY from_number ORDER BY created_at DESC) AS rn FROM {$wpdb->prefix}dialbunny_messages WHERE user = %d AND (from_number = %s OR to_number = %s)) AS ranked_messages WHERE rn = 1 ORDER BY created_at DESC LIMIT %d", $user_id, $managed_number,$managed_number, $limit)); // phpcs:ignore WordPress.DB.DirectDatabaseQuery 62 62 } 63 63 // check to see if the user has a managed number -
dialbunny/tags/1.1.0/lib/views/dashboard/messages/messages.php
r3326079 r3326308 15 15 $managed_number = $phone_details[0]->managed_number; 16 16 // Direct database query used below – $wpdb->prepare() is always used to prevent SQL injection. 17 $numberOfMessages = $wpdb->get_var($wpdb->prepare("SELECT COUNT(DISTINCT from_number) FROM {$wpdb->prefix}dialbunny_messages WHERE user = %d AND (from_number = %s OR to_number = %s)",$current_user_id,$managed_number,$managed_number)); // phpcs:ignore WordPress.DB.DirectDatabaseQuery17 $numberOfMessages = $wpdb->get_var($wpdb->prepare("SELECT COUNT(DISTINCT user) FROM {$wpdb->prefix}dialbunny_messages WHERE user = %d AND (from_number = %s OR to_number = %s)",$current_user_id,$managed_number,$managed_number)); // phpcs:ignore WordPress.DB.DirectDatabaseQuery 18 18 // Direct database query used below – $wpdb->prepare() is always used to prevent SQL injection. 19 $numberOfUnread = $wpdb->get_var($wpdb->prepare("SELECT COUNT(DISTINCT from_number) FROM {$wpdb->prefix}dialbunny_messages WHERE user = %d AND (from_number = %s OR to_number = %s) AND reading = '0'",$current_user_id,$managed_number,$managed_number)); // phpcs:ignore WordPress.DB.DirectDatabaseQuery19 $numberOfUnread = $wpdb->get_var($wpdb->prepare("SELECT COUNT(DISTINCT user) FROM {$wpdb->prefix}dialbunny_messages WHERE user = %d AND (from_number = %s OR to_number = %s) AND reading = '0'",$current_user_id,$managed_number,$managed_number)); // phpcs:ignore WordPress.DB.DirectDatabaseQuery 20 20 } 21 21 $resultsPage = 1;
Note: See TracChangeset
for help on using the changeset viewer.