Changeset 7586 for trunk/wp-includes/theme.php

Timestamp:

04/02/2008 01:15:21 PM (16 years ago)

Author:

markjaquith

Message:

Sanitize "cat" query var and cast to int before looking for a category template

File:

• trunk/wp-includes/theme.php (modified) (1 diff)

trunk/wp-includes/theme.php

@@ -364 +364 @@
 function get_category_template() {
     $template = '';
-    if ( file_exists(TEMPLATEPATH . "/category-" . get_query_var('cat') . '.php') )
-        $template = TEMPLATEPATH . "/category-" . get_query_var('cat') . '.php';
+    if ( file_exists(TEMPLATEPATH . "/category-" . absint( get_query_var('cat') ) . '.php') )
+        $template = TEMPLATEPATH . "/category-" . absint( get_query_var('cat') ) . '.php';
     elseif ( file_exists(TEMPLATEPATH . "/category.php") )
         $template = TEMPLATEPATH . "/category.php";