fix(sql): migrate interpolated queries to prepared statements

somethingwithproof · somethingwithproof · commit ba6a55b6929d · 2026-04-08T23:01:54.000-07:00
Signed-off-by: Thomas Vincent &lt;thomasvincent@gmail.com&gt;
diff --git a/setup.php b/setup.php
@@ -154,7 +154,7 @@ function audit_poller_bottom() {
 		$retention = read_config_option('audit_retention');
 
 		if ($retention > 0) {
-			db_execute('DELETE FROM audit_log WHERE event_time < FROM_UNIXTIME(' . (time() - ($retention * 86400)) . ')');
+			db_execute_prepared('DELETE FROM audit_log WHERE event_time < FROM_UNIXTIME(?)', array(time() - ($retention * 86400)));
 			$rows = db_affected_rows();
 			cacti_log('NOTE: Purged ' . $rows . ' Audit Log Records from Cacti', false, 'POLLER');
 		}

Original file line number	Diff line number	Diff line change
`@@ -154,7 +154,7 @@ function audit_poller_bottom() {`
`154`	`154`	`$retention = read_config_option('audit_retention');`
`155`	`155`
`156`	`156`	`if ($retention > 0) {`
`157`		`- db_execute('DELETE FROM audit_log WHERE event_time < FROM_UNIXTIME(' . (time() - ($retention * 86400)) . ')');`
	`157`	`+ db_execute_prepared('DELETE FROM audit_log WHERE event_time < FROM_UNIXTIME(?)', array(time() - ($retention * 86400)));`
`158`	`158`	`$rows = db_affected_rows();`
`159`	`159`	`cacti_log('NOTE: Purged ' . $rows . ' Audit Log Records from Cacti', false, 'POLLER');`
`160`	`160`	`}`