Escape mod_$theme option name. see #9015

git-svn-id: http://svn.automattic.com/wordpress/trunk@13469 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
nacin 2010-02-27 20:26:37 +00:00
parent 56c3658154
commit 6df81f3d95

View File

@ -1200,7 +1200,7 @@ function validate_current_theme() {
function get_theme_mod($name, $default = false) {
$theme = get_current_theme();
$mods = get_option("mods_$theme");
$mods = get_option( esc_sql( "mods_$theme" ) );
if ( isset($mods[$name]) )
return apply_filters( "theme_mod_$name", $mods[$name] );