dongyou6768 2018-05-16 12:27
浏览 199
已采纳

Wordpress wpdb->删除问题

I'm trying to delete a record from the database programmatically. When I have it hardcoded like this it does delete a record from the database:

$wpdb->delete( $table_name, array( 'user_id' => 1, 'timeMin' => 10), array('%d', '%d') );

However, when I try to do it in a dynamic manner with variables, it doesn't work. I even tried casting the variables to int to make sure they are they right type.

$id = (int) wp_get_current_user()->ID;
$time = (int) $_POST['umjp_time'];

$wpdb->delete( $table_name, array( 'user_id' => $id, 'timeMin' => $time), array('%d','%d'));

Why doesn't the dynamic code using variables work and how do I fix this?

  • 写回答

3条回答 默认 最新

  • douh9817 2018-05-16 13:18
    关注

    this is how I would recommend doing it:

    function vendor_module_remove_dealer($data)
    {
        global $wpdb;
    
        $sql = 'DELETE FROM `'. $wpdb->prefix .'my_table` WHERE `primary_id` = %d;';
    
        try {
            $wpdb->query($wpdb->prepare($sql, array($data['primary-id'])));
    
            return true;
        } catch (Exception $e) {
            return 'Error! '. $wpdb->last_error;
        }
    }
    

    this will prevent SQL Injection and delete your record safely, if it fails an error msg will be returned :)

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论
查看更多回答(2条)

报告相同问题?