Changeset 46650 for trunk/src/wp-login.php

Timestamp:

11/04/2019 03:04:41 PM (7 years ago)

Author:

SergeyBiryukov

Message:

Login and Registration: Simplify the test for wp_signon() added in [46640].

Make sure it actually tests the change in behavior, previously it passed both before and after the patch.

Add wp_unslash() to the last remaining instance of $_POST['user_login'] that didn't have it.

See #38744.

File:

• trunk/src/wp-login.php (modified) (1 diff)

trunk/src/wp-login.php

@@ -374 +374 @@
                 }
         } else {
-                $login     = trim( $_POST['user_login'] );
+                $login     = trim( wp_unslash( $_POST['user_login'] ) );
                 $user_data = get_user_by( 'login', $login );
         }