Use prepared queries instead of *_post_meta functions

Author: chriszarate

src/wp-includes/collaboration/class-wp-sync-post-meta-storage.php

@@ -74,14 +74,24 @@ class WP_Sync_Post_Meta_Storage implements WP_Sync_Storage {
 	 * @return bool True on success, false on failure.
 	 */
 	public function add_update( string $room, $update ): bool {
+		global $wpdb;
+
 		$post_id = $this->get_storage_post_id( $room );
 		if ( null === $post_id ) {
 			return false;
 		}
 
-		$meta_id = add_post_meta( $post_id, self::SYNC_UPDATE_META_KEY, $update, false );
+		$result = $wpdb->insert(
+			$wpdb->postmeta,
+			array(
+				'post_id'    => $post_id,
+				'meta_key'   => self::SYNC_UPDATE_META_KEY,
+				'meta_value' => maybe_serialize( $update ),
+			),
+			array( '%d', '%s', '%s' )
+		);
 
-		return (bool) $meta_id;
+		return false !== $result;
 	}
 
 	/**
@@ -93,12 +103,26 @@ public function add_update( string $room, $update ): bool {
 	 * @return array<int, mixed> Awareness state.
 	 */
 	public function get_awareness_state( string $room ): array {
+		global $wpdb;
+
 		$post_id = $this->get_storage_post_id( $room );
 		if ( null === $post_id ) {
 			return array();
 		}
 
-		$awareness = get_post_meta( $post_id, self::AWARENESS_META_KEY, true );
+		$raw = $wpdb->get_var(
+			$wpdb->prepare(
+				"SELECT meta_value FROM $wpdb->postmeta WHERE post_id = %d AND meta_key = %s",
+				$post_id,
+				self::AWARENESS_META_KEY
+			)
+		);
+
+		if ( null === $raw ) {
+			return array();
+		}
+
+		$awareness = maybe_unserialize( $raw );
 
 		if ( ! is_array( $awareness ) ) {
 			return array();
@@ -117,13 +141,43 @@ public function get_awareness_state( string $room ): array {
 	 * @return bool True on success, false on failure.
 	 */
 	public function set_awareness_state( string $room, array $awareness ): bool {
+		global $wpdb;
+
 		$post_id = $this->get_storage_post_id( $room );
 		if ( null === $post_id ) {
 			return false;
 		}
 
-		// update_post_meta returns false if the value is the same as the existing value.
-		update_post_meta( $post_id, wp_slash( self::AWARENESS_META_KEY ), wp_slash( $awareness ) );
+		$serialized = maybe_serialize( $awareness );
+
+		$meta_id = $wpdb->get_var(
+			$wpdb->prepare(
+				"SELECT meta_id FROM $wpdb->postmeta WHERE post_id = %d AND meta_key = %s",
+				$post_id,
+				self::AWARENESS_META_KEY
+			)
+		);
+
+		if ( $meta_id ) {
+			$wpdb->update(
+				$wpdb->postmeta,
+				array( 'meta_value' => $serialized ),
+				array( 'meta_id' => $meta_id ),
+				array( '%s' ),
+				array( '%d' )
+			);
+		} else {
+			$wpdb->insert(
+				$wpdb->postmeta,
+				array(
+					'post_id'    => $post_id,
+					'meta_key'   => self::AWARENESS_META_KEY,
+					'meta_value' => $serialized,
+				),
+				array( '%d', '%s', '%s' )
+			);
+		}
+
 		return true;
 	}