sanitize_sql_orderby( string $orderby ): string|false

Description

Parameters

$orderbystring

Order by clause to be validated.

Return

string|false

Returns $orderby if valid, false otherwise.

Source

View on Trac ↗View on GitHub ↗

2412function sanitize_sql_orderby( $orderby ) {2413	if ( preg_match( '/^\s*(([a-z0-9_]+|`[a-z0-9_]+`)(\s+(ASC|DESC))?\s*(,\s*(?=[a-z0-9_`])|$))+$/i', $orderby ) || preg_match( '/^\s*RAND\(\s*\)\s*$/i', $orderby ) ) {2414		return $orderby;2415	}2416	return false;2417}

History

Introduced in 2.5.1. Unchanged from 6.7.7 through 7.1.0.

1. 6.7.7
2. 6.8.8
3. 6.9.7
4. 7.0.4
5. 7.1.0

Signature, return type and hooks compared across 5 parsed releases.

About this page

Parsed data

Generated from the wordpress-develop 6.9.7 tag, from src/wp-includes/formatting.php, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.

Corrections

Something wrong on this page? Report it and it gets fixed in the next regeneration.