Changeset 14004 for trunk/wp-admin/ms-edit.php

Timestamp:

04/05/2010 03:12:54 AM (16 years ago)

Author:

wpmuguru

Message:

fix validation on dashboard site in ms-options, fixes #12831

File:

• trunk/wp-admin/ms-edit.php (modified) (1 diff)

trunk/wp-admin/ms-edit.php

@@ -78 +78 @@
             $_POST['dashboard_blog'] = $current_site->blog_id;
             $dashboard_blog_id = $current_site->blog_id;
-        } else {
-            $dashboard_blog = untrailingslashit( sanitize_user( str_replace( '.', '', str_replace( $current_site->domain . $current_site->path, '', $_POST['dashboard_blog'] ) ) ) );
+        } elseif ( ! preg_match( '/(--|\.)/', $_POST['dashboard_blog'] ) && preg_match( '|^([a-zA-Z0-9-\.])+$|', $_POST['dashboard_blog'] ) ) {
+            $dashboard_blog = $_POST['dashboard_blog'];
             $blog_details = get_blog_details( $dashboard_blog );
             if ( false === $blog_details ) {