$wpdb->prepare()
WordPress database query preparation method that safely parameterizes SQL queries.
How it works
WordPress database query preparation method that safely parameterizes SQL queries.
In WordPress
Never interpolate variables into SQL. Always use prepare() with %s (string) or %d (integer) placeholders.
Related terms
WP HealthKit checks for $wpdb->prepare()-related vulnerabilities automatically
Run a Free Audit