Changeset 18344

Timestamp:

06/27/2011 03:45:12 PM (15 years ago)

Author:

ryan

Message:

Sanitize order and orderby in get_terms()

File:

• trunk/wp-includes/taxonomy.php (modified) (2 diffs)

trunk/wp-includes/taxonomy.php

@@ -1230 +1230 @@
     elseif ( empty($_orderby) || 'id' == $_orderby )
         $orderby = 't.term_id';
+    else
+        $orderby = 't.name';
 
     $orderby = apply_filters( 'get_terms_orderby', $orderby, $args );
@@ -1237 +1239 @@
     else
         $order = '';
+
+    $order = strtoupper( $order );
+    if ( '' !== $order && !in_array( $order, array( 'ASC', 'DESC' ) ) )
+        $order = 'ASC';
 
     $where = "tt.taxonomy IN ('" . implode("', '", $taxonomies) . "')";