Changeset 59870

Timestamp:

02/25/2025 10:38:42 PM (2 months ago)

Author:

audrasjb

Message:

Date/Time: Add sanitization to WP_Locale::get_month().

By adding a sanitization to $wp_locale->get_month(), this changeset prevents a PHP Warning: Undefined array key "00" caused by single_month_title(). This function previously assumed that get_query_var( 'm' ) is always at least 6 digits, and always contains the year and the month, which is not necessarily true.

Props apermo, audrasjb, xateman.
Fixes #62824.

File:

• trunk/src/wp-includes/class-wp-locale.php (modified) (1 diff)

trunk/src/wp-includes/class-wp-locale.php

@@ -316 +316 @@
      *
      * @param string|int $month_number '01' through '12'.
-     * @return string Translated full month name.
+     * @return string Translated full month name. If the month number is not found, an empty string is returned.
      */
     public function get_month( $month_number ) {
-        return $this->month[ zeroise( $month_number, 2 ) ];
+        $month_number = zeroise( $month_number, 2 );
+        if ( ! isset( $this->month[ $month_number ] ) ) {
+            return '';
+        }
+        return $this->month[ $month_number ];
     }