Upstream/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2024-06-26 06:45:07 +02:00
Code Issues Projects Releases Wiki Activity

Only run stripslashes() on strings in update_usermeta(). Props stm. fixes #3240

Browse Source 
git-svn-id: http://svn.automattic.com/wordpress/trunk@4396 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
markjaquith 2006-10-14 05:35:50 +00:00
parent fd5492d87b
commit 997b5c7c3b
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
wp-includes/user.php
View File

@ -115,7 +115,8 @@ function update_usermeta( $user_id, $meta_key, $meta_value ) {
$meta_key = preg_replace('|[^a-z0-9_]|i', '', $meta_key);
// FIXME: usermeta data is assumed to be already escaped
$meta_value = stripslashes($meta_value);
if ( is_string($meta_value) )
$meta_value = stripslashes($meta_value);
$meta_value = maybe_serialize($meta_value);
$meta_value = $wpdb->escape($meta_value);