Ticket #13317: 13317-a-little-more-strictness.patch

wordpress/wp-includes/pluggable.php

@@ -103 +103 @@
 function get_userdata( $user_id ) {
         global $wpdb;
 
-        $user_id = absint( $user_id );
+        if ( ! is_scalar( $user_id ) )
+                return false;
+                
+        $user_id = abs( (int) $user_id );
         if ( ! $user_id )
                 return false;
 
@@ -112 +115 @@
         if ( $user )
                 return $user;
 
-        if ( ! $user = $wpdb->get_row( $wpdb->prepare( "SELECT * FROM $wpdb->users WHERE ID = %d LIMIT 1", $user_id ) ) )
+        if ( ! $user = $wpdb->get_row( $wpdb->prepare( "SELECT * FROM {$wpdb->users} WHERE ID = %d LIMIT 1", $user_id ) ) )
                 return false;
 
         _fill_user( $user );