Changeset 4396

Timestamp:

10/14/2006 05:35:50 AM (20 years ago)

Author:

markjaquith

Message:

Only run stripslashes() on strings in update_usermeta(). Props stm. fixes #3240

File:

• trunk/wp-includes/user.php (modified) (1 diff)

trunk/wp-includes/user.php

@@ -116 +116 @@
 
         // FIXME: usermeta data is assumed to be already escaped
-        $meta_value = stripslashes($meta_value);
+        if ( is_string($meta_value) )
+                $meta_value = stripslashes($meta_value);
         $meta_value = maybe_serialize($meta_value);
         $meta_value = $wpdb->escape($meta_value);