Ticket #11509: sanitize_user_field-check.11509.diff

wp-includes/user.php

@@ -638 +638 @@
                 else
                         $vars = get_object_vars($user);
                 foreach ( array_keys($vars) as $field ) {
-                        if ( is_array($user->$field) )
-                                continue;
-                        $user->$field = sanitize_user_field($field, $user->$field, $user->ID, $context);
+                        if ( is_string($user->$field) || is_numeric($user->$field) )
+                                $user->$field = sanitize_user_field($field, $user->$field, $user->ID, $context);
                 }
                 $user->filter = $context;
         } else {