aswinnair on "wordpress-mu-domain-mapping - Security issue"

Our scanning tool generated those .js files, but the vulnerability still exists. See another part of the code that needs fix. ANy help?

....
136. $domain = strtolower( $_POST[ 'domain' ] );
....
155. $wpdb->query( $wpdb->prepare( "UPDATE {$wpdb->dmtable} SET blog_id
= %d, domain = %s, active = %d WHERE domain = %s", $_POST[ 'blog_id' ],
$domain, $_POST[ 'active' ], $_POST[ 'orig_domain' ] ) );