我已经创建了一个个人插件，现在我担心这个漏洞：https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html

这就是我如何使用add\\u query\\u arg（）。这是好的还是我应该以某种方式保护它？

general\\u插件。php

function add_custom_query_var( $vars ){
  $vars[] = "custom_var";
  return $vars;
}
add_filter( \'query_vars\', \'add_custom_query_var\' );

plugin\\u part1。php

...
echo \'<a href="https://www.example.com/page/?custom_var=\'.$db_table->db_column.\'">text</a>....\'
...

plugin\\u part1-已修复。php

...
echo \'<a href="https://www.example.com/page/\'.add_query_arg( "custom_var", $db_table->db_column).\'">text</a>....\'
...

plugin\\u part2。php

$id = intval(get_query_var( \'custom_var\' ));
$sql = $mydb->prepare(
        "
        SELECT * 
        FROM `db_table` 
        WHERE `db_table`.`db_column` = %d
        ", 
        array($is)
);

add_query_arg($param1, $param2, $old_query_or_uri);

remove_query_arg($key, $query);

esc_url(add_query_arg($param1, $param2, $old_query_or_uri));

esc_url(remove_query_arg($key, $query));