Changeset 56815 for trunk/src/wp-includes/class-wp-query.php

Timestamp:

10/10/2023 11:20:28 AM (14 months ago)

Author:

SergeyBiryukov

Message:

Query: Ensure that the page parameter is scalar in WP_Query::get_posts().

The page query var only accepts a scalar value and passes the value through functions that assume a scalar value.

Adding an extra guard condition does not affect its functionality but does avoid a PHP fatal error for trim() when a non-scalar value such as an array is passed.

Follow-up to [2535], [53891].

Props brookedot, rlmc, mukesh27, SergeyBiryukov.
Fixes #56558.

File:

• trunk/src/wp-includes/class-wp-query.php (modified) (1 diff)

trunk/src/wp-includes/class-wp-query.php

@@ -2021 +2021 @@
 
         if ( isset( $q['page'] ) ) {
-            $q['page'] = trim( $q['page'], '/' );
-            $q['page'] = absint( $q['page'] );
+            $q['page'] = is_scalar( $q['page'] ) ? absint( trim( $q['page'], '/' ) ) : 0;
         }