Changeset 10677

Timestamp:

03/01/2009 07:59:41 PM (17 years ago)

Author:

ryan

Message:

Escape hyphen in regex. Props chrisbliss18. fixes #8548 #9244 for 2.7

File:

• branches/2.7/wp-includes/theme.php (modified) (2 diffs)

branches/2.7/wp-includes/theme.php

@@ -850 +850 @@
                 return;
 
-        $_GET['template'] = preg_replace('|[^a-z0-9_.-/]|i', '', $_GET['template']);
+        $_GET['template'] = preg_replace('|[^a-z0-9_.\-/]|i', '', $_GET['template']);
 
         if ( validate_file($_GET['template']) )
@@ -858 +858 @@
 
         if ( isset($_GET['stylesheet']) ) {
-                $_GET['stylesheet'] = preg_replace('|[^a-z0-9_.-/]|i', '', $_GET['stylesheet']);
+                $_GET['stylesheet'] = preg_replace('|[^a-z0-9_.\-/]|i', '', $_GET['stylesheet']);
                 if ( validate_file($_GET['stylesheet']) )
                         return;