$wpdb class, I found
get_row, and I am unsure if the function automatically prepares the query. I believe it does not and I may have to reexamine my code to prevent a future disaster.
Here is what my code looks, and I feel that it is vulnerable:
$wpdb->get_row("SELECT * FROM `my_table` WHERE column = '".$_GET['fromUrl']."'", ARRAY_A);
However, I have tried injecting a malicious input with the follow:
' or column = 'value'
And it seems not to work, should I go ahead and prepare my statements anyway?