|
Ning Zhang
|
September 18, 2013 at 1:41 pm
Hi There,
When we upgraded to the latest version of WordPress and EventEspresso, we started receiving php error codes. Did a little digging and found that the code base for EventEspresso need to be updated to avoid an security breach. I have typed out the error message from our site here:
Warning:Missing argument 2 for wpdb::prepare(), called in /nfs/c06/h06/mnt/175135/domains/….com/html/wp-content/plugins/event-espresso-2012/includes/process-registration/add_attendees_to_db.php on line 329
………….. wp-db.php on line 992
This is related to this:
PHP Warning: Missing argument 2 for wpdb::prepare()
http://make.wordpress.org/core/2012/12/12/php-warning-missing-argument-2-for-wpdb-prepare/
See link above. If this code is not patched, there are severe security risks for site.
|
|
Sidney Harrell
|
September 18, 2013 at 2:05 pm
includes/process-registration/add_attendees_to_db.php on line 329 in the current version of EE is:
'end_date' => $end_date,
Are you on EE 3.1.27.P ?
As a side note, we provide a quick link on the right side of the screen where you can notify us of a potential security breach without making that potential publicly available. Publisising a potential security breach before giving us an oportunity to patch it puts all users of EE at risk.
|
|
Ning Zhang
|
September 18, 2013 at 2:50 pm
Thanks. Didn’t realize the side link for security. You can delete this post if you like for now.
|
|
Ning Zhang
|
September 19, 2013 at 12:45 pm
I’m not sure what to do with this
includes/process-registration/add_attendees_to_db.php on line 329 in the current version of EE is:
<pre class=”brush: php; gutter: true; first-line: 1; highlight: []; html-script: false”>1 'end_date' => $end_date,
Are we pasting “<pre class=”brush: php; gutter: true; first-line: 1; highlight: []; html-script: false”>'end_date' => $end_date,” into the php at line 329?
|
|
Josh
|
September 19, 2013 at 2:42 pm
We advise updating to the latest version of Event Espresso instead of trying to patch the older version.
|
|
Ning Zhang
|
September 19, 2013 at 3:54 pm
Is the latest version .35P in the WordPress Plugin channel yet? We refreshed several times but did not see the upgrade message show up for the Plugin on the Plugin page.
|
|
Dean
|
September 20, 2013 at 2:09 am
The latest version of Event Espresso (currently 3.1.35) is always available from your account page.
Please update manually, it may be that the version you are using did not have one click updates at that point.
|
