Hacker News new | ask | show | jobs
by tyingq 1277 days ago
It doesn't even currently use real parameterized queries...it has a method that sounds like they are real, but they aren't...just a really hairy bunch of string escaping. They really need to re-write the database layer from scratch.

Behold: https://github.com/WordPress/WordPress/blob/master/wp-includ...

1 comments

This brings back bad memories. I shouldn’t have reminded myself of what WP code looks like.