Changeset 29339 for trunk/src/wp-includes/meta.php

Timestamp:

08/01/2014 05:09:53 PM (10 years ago)

Author:

wonderboymusic

Message:

Bail on update_user_meta() when $object_id is non-numeric.

Adds unit test.

Props jacklenox, wonderboymusic.
Fixes #28315.

File:

• trunk/src/wp-includes/meta.php (modified) (1 diff)

trunk/src/wp-includes/meta.php

@@ -138 +138 @@
         return false;
 
-    if ( !$object_id = absint($object_id) )
-        return false;
+    if ( ! is_numeric( $object_id ) || ! $object_id = absint( $object_id ) ) {
+        return false;
+    }
 
     if ( ! $table = _get_meta_table($meta_type) )