Changeset 38600

Timestamp:

09/13/2016 11:16:15 PM (10 years ago)

Author:

SergeyBiryukov

Message:

XML-RPC: Check the minimum number of arguments in ::wp_getUsersBlogs() and ::blogger_getUsersBlogs().

Props kitchin for initial patch.
Fixes #29750.

File:

• trunk/src/wp-includes/class-wp-xmlrpc-server.php (modified) (2 diffs)

trunk/src/wp-includes/class-wp-xmlrpc-server.php

@@ -597 +597 @@
          */
         public function wp_getUsersBlogs( $args ) {
+                if ( ! $this->minimum_args( $args, 2 ) ) {
+                        return $this->error;
+                }
+
                 // If this isn't on WPMU then just use blogger_getUsersBlogs
                 if ( !is_multisite() ) {
@@ -4323 +4327 @@
          */
         public function blogger_getUsersBlogs($args) {
-                if ( is_multisite() )
+                if ( ! $this->minimum_args( $args, 3 ) ) {
+                        return $this->error;
+                }
+
+                if ( is_multisite() ) {
                         return $this->_multisite_getUsersBlogs($args);
+                }
 
                 $this->escape($args);