Ticket #22921: user.php.diff

user.php

@@ -402 +402 @@
                         $this->query_fields = implode( ',', $this->query_fields );
                 } elseif ( 'all' == $qv['fields'] ) {
                         $this->query_fields = "$wpdb->users.*";
+                } elseif ( in_array( $qv['fields'], array( 'ID', 'user_login', 'user_pass', 'user_nicename', 'user_email', 'user_url', 'user_registered', 'user_activation_key', 'user_status', 'display_name' ) ) ) {
+                        $this->query_fields = $wpdb->users . '.' . esc_sql( $qv['fields'] );
                 } else {
                         $this->query_fields = "$wpdb->users.ID";
                 }