Cast to int after escaping. Props Joseph Scott.
git-svn-id: https://develop.svn.wordpress.org/trunk@5173 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
parent
aa82383dc6
commit
75fdbf0f87
@ -360,7 +360,7 @@ class wp_xmlrpc_server extends IXR_Server {
|
|||||||
function wp_editPage($args) {
|
function wp_editPage($args) {
|
||||||
// Items not escaped here will be escaped in editPost.
|
// Items not escaped here will be escaped in editPost.
|
||||||
$blog_id = (int) $args[0];
|
$blog_id = (int) $args[0];
|
||||||
$page_id = $this->escape((int) $args[1]);
|
$page_id = (int) $this->escape($args[1]);
|
||||||
$username = $this->escape($args[2]);
|
$username = $this->escape($args[2]);
|
||||||
$password = $this->escape($args[3]);
|
$password = $this->escape($args[3]);
|
||||||
$content = $args[4];
|
$content = $args[4];
|
||||||
|
Loading…
Reference in New Issue
Block a user