Changeset 18346 for trunk/wp-admin/includes/media.php

Timestamp:

06/27/2011 03:56:42 PM (14 years ago)

Author:

ryan

Message:

Hardening. Santizers for WPLANG and new_admin_email. Prevent stomping ID and filter. Validate locale filename. Props westi.

File:

• trunk/wp-admin/includes/media.php (modified) (2 diffs)

trunk/wp-admin/includes/media.php

@@ -229 +229 @@
     ), $post_data );
 
+    // This should never be set as it would then overwrite an existing attachment.
+    if ( isset( $attachment['ID'] ) )
+        unset( $attachment['ID'] );
+
     // Save the data
     $id = wp_insert_attachment($attachment, $file, $post_id);
@@ -281 +285 @@
         'post_content' => $content,
     ), $post_data );
+
+    // This should never be set as it would then overwrite an existing attachment.
+    if ( isset( $attachment['ID'] ) )
+        unset( $attachment['ID'] );
 
     // Save the attachment metadata