Changeset 21758 for trunk/wp-includes/taxonomy.php

Timestamp:

09/05/2012 01:23:53 AM (13 years ago)

Author:

nacin

Message:

Validate $order in wp_get_object_terms(). props duck_.

File:

• trunk/wp-includes/taxonomy.php (modified) (1 diff)

trunk/wp-includes/taxonomy.php

@@ -1941 +1941 @@
         $orderby = "ORDER BY $orderby";
 
+    $order = strtoupper( $order );
+    if ( '' !== $order && ! in_array( $order, array( 'ASC', 'DESC' ) ) )
+        $order = 'ASC';
+
     $taxonomies = "'" . implode("', '", $taxonomies) . "'";
     $object_ids = implode(', ', $object_ids);