Changeset 10677 for branches/2.7/wp-includes/theme.php

Timestamp:

03/01/2009 07:59:41 PM (16 years ago)

Author:

ryan

Message:

Escape hyphen in regex. Props chrisbliss18. fixes #8548 #9244 for 2.7

File:

• branches/2.7/wp-includes/theme.php (modified) (2 diffs)

branches/2.7/wp-includes/theme.php

@@ -850 +850 @@
         return;
 
-    $_GET['template'] = preg_replace('|[^a-z0-9_.-/]|i', '', $_GET['template']);
+    $_GET['template'] = preg_replace('|[^a-z0-9_.\-/]|i', '', $_GET['template']);
 
     if ( validate_file($_GET['template']) )
@@ -858 +858 @@
 
     if ( isset($_GET['stylesheet']) ) {
-        $_GET['stylesheet'] = preg_replace('|[^a-z0-9_.-/]|i', '', $_GET['stylesheet']);
+        $_GET['stylesheet'] = preg_replace('|[^a-z0-9_.\-/]|i', '', $_GET['stylesheet']);
         if ( validate_file($_GET['stylesheet']) )
             return;