Changeset 7586 for branches/2.5/wp-includes/query.php

Timestamp:

04/02/2008 01:15:21 PM (17 years ago)

Author:

markjaquith

Message:

Sanitize "cat" query var and cast to int before looking for a category template

File:

• branches/2.5/wp-includes/query.php (modified) (1 diff)

branches/2.5/wp-includes/query.php

@@ -520 +520 @@
         $qv['w'] = (int) $qv['w'];
         $qv['m'] =  (int) $qv['m'];
+        $qv['cat'] = preg_replace( '|[^0-9,-]|', '', $qv['cat'] ); // comma separated list of positive or negative integers
         if ( '' !== $qv['hour'] ) $qv['hour'] = (int) $qv['hour'];
         if ( '' !== $qv['minute'] ) $qv['minute'] = (int) $qv['minute'];