# remove this line; added to prevent possible RFI get_results("SELECT ID, post_name FROM $wpdb->posts"); foreach ($posts_to_fix as $fix) { echo "fixing: $fix->ID\n"; $name = sanitize_title($fix->post_name); $wpdb->query(" UPDATE $wpdb->posts SET post_name = '$name' WHERE ID = " . $fix->ID); } ?>