Changeset 11776

Timestamp:

08/05/2009 05:56:00 AM (16 years ago)

Author:

azaozz

Message:

Sanitize $include and $exclude in the gallery shortcode

File:

• trunk/wp-includes/media.php (modified) (2 diffs)

trunk/wp-includes/media.php

@@ -672 +672 @@
 
     if ( !empty($include) ) {
+        $include = preg_replace( '/[^0-9,]+/', '', $include );
         $_attachments = get_posts( array('include' => $include, 'post_status' => 'inherit', 'post_type' => 'attachment', 'post_mime_type' => 'image', 'order' => $order, 'orderby' => $orderby) );
 
@@ -679 +680 @@
         }
     } elseif ( !empty($exclude) ) {
+        $exclude = preg_replace( '/[^0-9,]+/', '', $exclude );
         $attachments = get_children( array('post_parent' => $id, 'exclude' => $exclude, 'post_status' => 'inherit', 'post_type' => 'attachment', 'post_mime_type' => 'image', 'order' => $order, 'orderby' => $orderby) );
     } else {