WordPress.org
Get WordPress

Make WordPress Core

Ticket #44808: 44808.2.patch

File 44808.2.patch, 766 bytes (added by dharmin16, 5 years ago)

Trim domain name variable before validation

  • wp-admin/network/site-new.php 

    diff --git a/wp-admin/network/site-new.php b/wp-admin/network/site-new.php
index 318c7b4..c70ad9f 100644
    a b if ( isset( $_REQUEST['action'] ) && 'add-site' == $_REQUEST['action'] ) { 
    4040                wp_die( __( 'Can’t create an empty site.' ) );
    4141        }
    4242
    43         $blog   = $_POST['blog'];
    44         $domain = '';
    45         if ( preg_match( '|^([a-zA-Z0-9-])+$|', $blog['domain'] ) ) {
    46                 $domain = strtolower( $blog['domain'] );
     43        $blog       = $_POST['blog'];
     44        $domain     = '';
     45        $raw_domain = trim( $blog['domain'] );
     46        if ( preg_match( '|^([a-zA-Z0-9-])+$|', $raw_domain ) ) {
     47                $domain = strtolower( $raw_domain );
    4748        }
    4849
    4950        // If not a subdomain installation, make sure the domain isn't a reserved word