From 151bd98491245542f93a772ec94cd08bace25e3d Mon Sep 17 00:00:00 2001 From: Ryan Boren Date: Tue, 11 Aug 2009 04:53:10 +0000 Subject: [PATCH] Reject activation keys that are arrays. git-svn-id: https://develop.svn.wordpress.org/trunk@11797 602fd350-edb4-49c9-b593-d223f7449a82 --- wp-login.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wp-login.php b/wp-login.php index 62898123f2..9e57f19b04 100644 --- a/wp-login.php +++ b/wp-login.php @@ -187,7 +187,7 @@ function reset_password($key) { $key = preg_replace('/[^a-z0-9]/i', '', $key); - if ( empty( $key ) ) + if ( empty( $key ) || is_array( $key ) ) return new WP_Error('invalid_key', __('Invalid key')); $user = $wpdb->get_row($wpdb->prepare("SELECT * FROM $wpdb->users WHERE user_activation_key = %s", $key));