Changeset 14004 for trunk/wp-admin/ms-edit.php

Timestamp:

04/05/2010 03:12:54 AM (17 years ago)

Author:

wpmuguru

Message:

fix validation on dashboard site in ms-options, fixes #12831

File:

• trunk/wp-admin/ms-edit.php (modified) (1 diff)

trunk/wp-admin/ms-edit.php

@@ -78 +78 @@
                         $_POST['dashboard_blog'] = $current_site->blog_id;
                         $dashboard_blog_id = $current_site->blog_id;
-                } else {
-                        $dashboard_blog = untrailingslashit( sanitize_user( str_replace( '.', '', str_replace( $current_site->domain . $current_site->path, '', $_POST['dashboard_blog'] ) ) ) );
+                } elseif ( ! preg_match( '/(--|\.)/', $_POST['dashboard_blog'] ) && preg_match( '|^([a-zA-Z0-9-\.])+$|', $_POST['dashboard_blog'] ) ) {
+                        $dashboard_blog = $_POST['dashboard_blog'];
                         $blog_details = get_blog_details( $dashboard_blog );
                         if ( false === $blog_details ) {