Changes from trunk/wp-includes/capabilities.php at r19325 to branches/3.3/wp-includes/capabilities.php at r19668

File:

• branches/3.3/wp-includes/capabilities.php (modified) (1 diff, 1 prop)

branches/3.3/wp-includes/capabilities.php

@@ -488 +488 @@
                 global $wpdb;
 
-                if ( 'id' == $field )
+                if ( 'id' == $field ) {
+                        // Make sure the value is numeric to avoid casting objects, for example,
+                        // to int 1.
+                        if ( ! is_numeric( $value ) )
+                                return false;
                         $value = absint( $value );
-                else
+                } else {
                         $value = trim( $value );
+                }
 
                 if ( !$value )