Make WordPress Core


Ignore:
Timestamp:
10/14/2006 05:35:50 AM (18 years ago)
Author:
markjaquith
Message:

Only run stripslashes() on strings in update_usermeta(). Props stm. fixes #3240

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-includes/user.php

    r4383 r4396  
    116116
    117117    // FIXME: usermeta data is assumed to be already escaped
    118     $meta_value = stripslashes($meta_value);
     118    if ( is_string($meta_value) )
     119        $meta_value = stripslashes($meta_value);
    119120    $meta_value = maybe_serialize($meta_value);
    120121    $meta_value = $wpdb->escape($meta_value);
Note: See TracChangeset for help on using the changeset viewer.