Changeset 31149

Timestamp:

01/11/2015 10:30:26 PM (12 years ago)

Author:

wonderboymusic

Message:

In wp_xmlrpc_server, only allow __call() to run against ->_multisite_getUsersBlogs().

See #30891.

File:

• trunk/src/wp-includes/class-wp-xmlrpc-server.php (modified) (1 diff)

trunk/src/wp-includes/class-wp-xmlrpc-server.php

@@ -162 +162 @@
          */
         public function __call( $name, $arguments ) {
-                return call_user_func_array( array( $this, $name ), $arguments );
+                if ( '_multisite_getUsersBlogs' === $name ) {
+                        return call_user_func_array( array( $this, $name ), $arguments );
+                }
+                return false;
         }