Changes from trunk/wp-includes/capabilities.php at r19325 to branches/3.3/wp-includes/capabilities.php at r19668

File:

• branches/3.3/wp-includes/capabilities.php (modified) (1 diff, 1 prop)

branches/3.3/wp-includes/capabilities.php

@@ -488 +488 @@
         global $wpdb;
 
-        if ( 'id' == $field )
+        if ( 'id' == $field ) {
+            // Make sure the value is numeric to avoid casting objects, for example,
+            // to int 1.
+            if ( ! is_numeric( $value ) )
+                return false;
             $value = absint( $value );
-        else
+        } else {
             $value = trim( $value );
+        }
 
         if ( !$value )