From 90cd098abe223350615b389f887b7148cad64d8d Mon Sep 17 00:00:00 2001 From: Ryan Boren Date: Fri, 11 May 2007 00:56:12 +0000 Subject: [PATCH] Escapage git-svn-id: https://develop.svn.wordpress.org/trunk@5441 602fd350-edb4-49c9-b593-d223f7449a82 --- wp-includes/pluggable.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/wp-includes/pluggable.php b/wp-includes/pluggable.php index a560df001e..eb2d7bcc19 100644 --- a/wp-includes/pluggable.php +++ b/wp-includes/pluggable.php @@ -121,6 +121,8 @@ function get_userdatabylogin($user_login) { if ( $userdata ) return $userdata; + $user_login = $wpdb->escape($user_login); + if ( !$user = $wpdb->get_row("SELECT * FROM $wpdb->users WHERE user_login = '$user_login'") ) return false;