prepare() placeholders. * * @param string $identifier Table or column name. * @return string Validated unquoted identifier; invalid identifiers fail closed. */ function nbh_performance_validated_table_name( $identifier ) { if ( ! is_string( $identifier ) || strlen( $identifier ) > 64 || ! preg_match( '/\A[A-Za-z0-9_]+\z/D', $identifier ) ) { return ''; // Deliberately produce invalid SQL rather than risk targeting a different table. } return $identifier; } }