Changeset 13469

Timestamp:

02/27/2010 08:26:37 PM (15 years ago)

Author:

nacin

Message:

Escape mod_$theme option name. see #9015

File:

• trunk/wp-includes/theme.php (modified) (1 diff)

trunk/wp-includes/theme.php

@@ -1201 +1201 @@
     $theme = get_current_theme();
 
-    $mods = get_option("mods_$theme");
+    $mods = get_option( esc_sql( "mods_$theme" ) );
 
     if ( isset($mods[$name]) )