sql injection issue fixed

optimisthub · Dec 21, 2021 · ae1120d · ae1120d
1 parent 1230316
commit ae1120d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 3 deletions.
diff --git a/core/library/Optimisthub_Transaction_History.php b/core/library/Optimisthub_Transaction_History.php
@@ -36,7 +36,7 @@ public function transactionTab()
     public function transactionHistory()
     {
         global $wpdb;
-        $results = $wpdb->get_results( $wpdb->prepare( "SELECT * FROM $this->tableName ORDER BY id DESC LIMIT 0,1000" ), ARRAY_A ); 
+        $results = $wpdb->get_results("SELECT * FROM $this->tableName ORDER BY id DESC LIMIT 0,1000" ); 
         return self::__renderHtml($results);
     }
 
@@ -60,8 +60,6 @@ private function __renderHtml($logs)
             }
 
             $color = $errorMessage ? ' color:red ': '';
-
-
 
             $output .= '<div class="per-log '.$extra.'">';
                 $output .= '<strong>'.__("Order Id", "moka-woocommerce" ).' : </strong>' . data_get($perLog, 'id_cart'). ' - ';

diff --git a/readme.md b/readme.md
@@ -34,6 +34,7 @@ Moka Pos, Moka Pay plugin;
 ### Changelog 
 
 #### Version 2.3
+- Hotfix : Security issue fixed on wpdb::prepare . 
 - Issue : WooCommerce Thank You page with message issue fixed. 
 - Issue : Tested up with WooCommerce 6.0.0. 
 - Issue : Admin panel settings tab screen resulation issues fixed.