Changeset 27077

Timestamp:

02/02/2014 10:09:19 PM (11 years ago)

Author:

nacin

Message:

Consistently trim and unslash search queries for the users list tables.

props aubreypwd.
fixes #26115.

Location:

trunk/src/wp-admin/includes

Files:

• class-wp-ms-users-list-table.php (modified) (1 diff)
• class-wp-users-list-table.php (modified) (1 diff)

trunk/src/wp-admin/includes/class-wp-ms-users-list-table.php

@@ -17 +17 @@
         global $usersearch, $role, $wpdb, $mode;
 
-        $usersearch = isset( $_REQUEST['s'] ) ? $_REQUEST['s'] : '';
+        $usersearch = isset( $_REQUEST['s'] ) ? wp_unslash( trim( $_REQUEST['s'] ) ) : '';
 
         $users_per_page = $this->get_items_per_page( 'users_network_per_page' );

trunk/src/wp-admin/includes/class-wp-users-list-table.php

@@ -36 +36 @@
         global $role, $usersearch;
 
-        $usersearch = isset( $_REQUEST['s'] ) ? trim( $_REQUEST['s'] ) : '';
+        $usersearch = isset( $_REQUEST['s'] ) ? wp_unslash( trim( $_REQUEST['s'] ) ) : '';
 
         $role = isset( $_REQUEST['role'] ) ? $_REQUEST['role'] : '';