Changeset 20351 for trunk/wp-includes/class-wp-xmlrpc-server.php

Timestamp:

04/04/2012 08:11:21 PM (14 years ago)

Author:

westi

Message:

XMLRPC: Add a check in mw.newPost to stop the authorID being changed to an invalid value. Fixes #20356 props maxcutler.

File:

• trunk/wp-includes/class-wp-xmlrpc-server.php (modified) (1 diff)

trunk/wp-includes/class-wp-xmlrpc-server.php

@@ -3616 +3616 @@
                     break;
             }
+            $author = get_userdata( $content_struct['wp_author_id'] );
+            if ( ! $author )
+                return new IXR_Error( 404, __( 'Invalid author ID.' ) );
             $post_author = $content_struct['wp_author_id'];
         }