Escape mod_$theme option name. see #9015

git-svn-id: https://develop.svn.wordpress.org/trunk@13469 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Andrew Nacin 2010-02-27 20:26:37 +00:00
parent a7a3e94381
commit 7c2178caba

View File

@ -1200,7 +1200,7 @@ function validate_current_theme() {
function get_theme_mod($name, $default = false) {
$theme = get_current_theme();
$mods = get_option("mods_$theme");
$mods = get_option( esc_sql( "mods_$theme" ) );
if ( isset($mods[$name]) )
return apply_filters( "theme_mod_$name", $mods[$name] );