SQL syntax error in eme_get_booking_ids_by_email_event_id (eme_rsvp.php)

[Anonymous]

We’re seeing this error being logged:

WordPress database error You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘WHERE bookings.person_id = people.person_id AND people.email = ’email@not.test’ at line 1 for query SELECT booking_id FROM wp_eme_bookings AS bookings, wp_eme_people AS people WHERE bookings.status=1 AND WHERE bookings.person_id = people.person_id AND people.email = ’email@not.test’ AND event_id = 13 /* From [test.com/wp-admin/admin-ajax.php] in [/nas/content/live/test/wp-content/plugins/events-made-easy/eme_rsvp.php:948] */ made by do_action(‘wp_ajax_nopriv_eme_add_bookings’), WP_Hook->do_action, WP_Hook->apply_filters, call_user_func_array, eme_add_bookings_ajax, eme_book_seats, eme_multibook_seats, eme_get_booking_ids_by_email_event_id

The error is being generated by “AND WHERE” the SQL query. Changing “AND WHERE” to “AND” seems to fix the problem.

function eme_get_booking_ids_by_email_event_id($email,$event_id) {
global $wpdb;
$bookings_table = $wpdb->prefix.BOOKINGS_TBNAME;
$persons_table = $wpdb->prefix.PEOPLE_TBNAME;
$sql = $wpdb->prepare(“SELECT booking_id FROM $bookings_table AS bookings, $persons_table AS people WHERE bookings.status=%d AND WHERE bookings.person_id = people.person_id AND people.email = %s AND event_id = %d”,RSVP_STATUS_ACTIVE,$email,$event_id);
return $wpdb->get_col($sql);
}

[Franky]

This is now fixed in 2.0.68 (being released now)

[Author]

Posts