XML-RPC: Check the minimum number of arguments in ::wp_getUsersBlogs() and ::blogger_getUsersBlogs().

Props kitchin for initial patch.
Fixes #29750.
Built from https://develop.svn.wordpress.org/trunk@38600


git-svn-id: http://core.svn.wordpress.org/trunk@38543 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
Sergey Biryukov 2016-09-13 23:17:28 +00:00
parent 320fe3a2b6
commit d7f840a211
2 changed files with 11 additions and 2 deletions

View File

@ -596,6 +596,10 @@ class wp_xmlrpc_server extends IXR_Server {
* - 'xmlrpc' - url of xmlrpc endpoint * - 'xmlrpc' - url of xmlrpc endpoint
*/ */
public function wp_getUsersBlogs( $args ) { public function wp_getUsersBlogs( $args ) {
if ( ! $this->minimum_args( $args, 2 ) ) {
return $this->error;
}
// If this isn't on WPMU then just use blogger_getUsersBlogs // If this isn't on WPMU then just use blogger_getUsersBlogs
if ( !is_multisite() ) { if ( !is_multisite() ) {
array_unshift( $args, 1 ); array_unshift( $args, 1 );
@ -4322,8 +4326,13 @@ class wp_xmlrpc_server extends IXR_Server {
* @return array|IXR_Error * @return array|IXR_Error
*/ */
public function blogger_getUsersBlogs($args) { public function blogger_getUsersBlogs($args) {
if ( is_multisite() ) if ( ! $this->minimum_args( $args, 3 ) ) {
return $this->error;
}
if ( is_multisite() ) {
return $this->_multisite_getUsersBlogs($args); return $this->_multisite_getUsersBlogs($args);
}
$this->escape($args); $this->escape($args);

View File

@ -4,7 +4,7 @@
* *
* @global string $wp_version * @global string $wp_version
*/ */
$wp_version = '4.7-alpha-38599'; $wp_version = '4.7-alpha-38600';
/** /**
* Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema. * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.