Changeset 41786 for trunk/src/wp-includes/rewrite.php

Timestamp:

10/06/2017 11:28:38 PM (7 years ago)

Author:

SergeyBiryukov

Message:

Rewrite: In url_to_postid(), bail early if the URL does not belong to the site.

Props ivankristianto, swissspidy, jkhongusc, SergeyBiryukov.
Fixes #39373.

File:

• trunk/src/wp-includes/rewrite.php (modified) (1 diff)

trunk/src/wp-includes/rewrite.php

@@ -472 +472 @@
     $url = apply_filters( 'url_to_postid', $url );
 
+    $url_host      = str_replace( 'www.', '', parse_url( $url, PHP_URL_HOST ) );
+    $home_url_host = str_replace( 'www.', '', parse_url( home_url(), PHP_URL_HOST ) );
+
+    // Bail early if the URL does not belong to this site.
+    if ( $url_host && $url_host !== $home_url_host ) {
+        return 0;
+    }
+
     // First, check to see if there is a 'p=N' or 'page_id=N' to match against
     if ( preg_match('#[?&](p|page_id|attachment_id)=(\d+)#', $url, $values) )   {