Ticket #11781: 11781.diff

wp-admin/ms-edit.php

@@ -246 +246 @@
                                 $role_len = strlen( $role );
                                 $existing_role = $wpdb->get_var( "SELECT meta_value FROM $wpdb->usermeta WHERE user_id = '$userid'  AND meta_key = '" . $blog_prefix. "capabilities'" );
                                 if( false == $existing_role ) {
-                                        $wpdb->query( "INSERT INTO " . $wpdb->usermeta . "( `umeta_id` , `user_id` , `meta_key` , `meta_value` ) VALUES ( NULL, '$userid', '" . $blog_prefix . "capabilities', 'a:1:{s:" . strlen( $role ) . ":\"" . $role . "\";b:1;}')" );
+                                        $wpdb->query( "INSERT INTO " . $wpdb->usermeta . "( `umeta_id` , `user_id` , `meta_key` , `meta_value` ) VALUES ( NULL, '$userid', '" . $blog_prefix . "capabilities', '" . $wpdb->escape(serialize(array($role => true))) . "')" );
                                 } elseif( $existing_role != "a:1:{s:" . strlen( $role ) . ":\"" . $role . "\";b:1;}" ) {
-                                        $wpdb->query( "UPDATE $wpdb->usermeta SET meta_value = 'a:1:{s:" . strlen( $role ) . ":\"" . $role . "\";b:1;}' WHERE user_id = '$userid'  AND meta_key = '" . $blog_prefix . "capabilities'" );
+                                        $wpdb->query( "UPDATE $wpdb->usermeta SET meta_value = '" . $wpdb->escape(serialize(array($role => true))) . "' WHERE user_id = '$userid'  AND meta_key = '" . $blog_prefix . "capabilities'" );
                                 }
 
                         }