sergiotarxz
/
Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Only run stripslashes() on strings in update_usermeta(). Props stm. fixes #3240 

git-svn-id: https://develop.svn.wordpress.org/trunk@4396 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Mark Jaquith 2006-10-14 05:35:50 +00:00
parent 2cc7fdd66b
commit 60848ed137
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
wp-includes/user.php
View File

@ -115,6 +115,7 @@ function update_usermeta( $user_id, $meta_key, $meta_value ) {
$meta_key = preg_replace('|[^a-z0-9_]|i', '', $meta_key);
// FIXME: usermeta data is assumed to be already escaped
if ( is_string($meta_value) )
$meta_value = stripslashes($meta_value);
$meta_value = maybe_serialize($meta_value);
$meta_value = $wpdb->escape($meta_value);