Unescaped parameter $autoupdates used in $wpdb->query("ALTER TABLE $autoupdates CONVERT TO CHARACTER SET $db_charset")\n$autoupdates assigned unsafely at line 213:\n $autoupdates \t= $wpdb->prefix."auto_updates"\n$db_charset assigned unsafely at line 215:\n $db_charset \t= constant( 'DB_CHARSET' )\n$updateLog assigned unsafely at line 214:\n $updateLog \t\t= $wpdb->prefix."update_log"
Unescaped parameter $autoupdates used in $wpdb->query("DROP TABLE IF EXISTS $autoupdates")\n$autoupdates assigned unsafely at line 180:\n $autoupdates \t= $wpdb->prefix."auto_updates"\n$updateLog assigned unsafely at line 181:\n $updateLog \t\t= $wpdb->prefix."update_log"
Unescaped parameter $pro_table used in $wpdb->get_var("SELECT COUNT(*) FROM $pro_table")\n$pro_table assigned unsafely at line 64:\n $pro_table\t\t= $wpdb->prefix . "fsb_images"\n$rowcount assigned unsafely at line 69:\n $rowcount\t= $wpdb->get_var( "SELECT COUNT(*) FROM $pro_table" )
Unescaped parameter $pro_table used in $wpdb->get_var("show tables like '$pro_table'")\n$pro_table assigned unsafely at line 64:\n $pro_table\t\t= $wpdb->prefix . "fsb_images"\n$rowcount used without escaping.
Affected Plugins
Plugins that have instances of this rule violation
Unescaped parameter $table_name used in $wpdb->get_col("SELECT COUNT(*) as num_rows FROM {$table_name} WHERE {$id} = '{$whattocheck}'")\n$table_name assigned unsafely at line 123:\n $table_name = $wpdb->prefix.$db_table\n$id used without escaping.\n$whattocheck used without escaping.\n$db_table used without escaping.