Reject activation keys that are arrays.
git-svn-id: https://develop.svn.wordpress.org/trunk@11797 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
parent
d895dcb002
commit
151bd98491
@ -187,7 +187,7 @@ function reset_password($key) {
|
||||
|
||||
$key = preg_replace('/[^a-z0-9]/i', '', $key);
|
||||
|
||||
if ( empty( $key ) )
|
||||
if ( empty( $key ) || is_array( $key ) )
|
||||
return new WP_Error('invalid_key', __('Invalid key'));
|
||||
|
||||
$user = $wpdb->get_row($wpdb->prepare("SELECT * FROM $wpdb->users WHERE user_activation_key = %s", $key));
|
||||
|
Loading…
Reference in New Issue
Block a user