From 8ce92293a14e52361707b1edaa1ea789ba39c431 Mon Sep 17 00:00:00 2001
From: Phil Banks <phl@bnks.xyz>
Date: Mon, 15 Feb 2021 12:14:21 +0000
Subject: [PATCH] wp_slash $old_user_data->user_email in wp_insert_user
---
src/wp-includes/user.php | 3 +++
1 file changed, 3 insertions(+)
diff --git a/src/wp-includes/user.php b/src/wp-includes/user.php
index 5c6db55afb..4496c7ec39 100644
a
|
b
|
function wp_insert_user( $userdata ) { |
1757 | 1757 | return new WP_Error( 'invalid_user_id', __( 'Invalid user ID.' ) ); |
1758 | 1758 | } |
1759 | 1759 | |
| 1760 | // Prevent failures in comparisons later. |
| 1761 | $old_user_data->user_email = wp_slash( $old_user_data->user_email ); |
| 1762 | |
1760 | 1763 | // Hashed in wp_update_user(), plaintext if called directly. |
1761 | 1764 | $user_pass = ! empty( $userdata['user_pass'] ) ? $userdata['user_pass'] : $old_user_data->user_pass; |
1762 | 1765 | } else { |