Changeset 8510 for trunk/wp-includes/rewrite.php

Timestamp:

07/30/2008 05:17:38 PM (16 years ago)

Author:

ryan

Message:

Add prohphylactic addlashes when evaling query. Props xknown.

File:

• trunk/wp-includes/rewrite.php (modified) (1 diff)

trunk/wp-includes/rewrite.php

@@ -153 +153 @@
 
             // Substitute the substring matches into the query.
-            eval("\$query = \"$query\";");
+            eval("\$query = \"" . addslashes($query) . "\";");
             // Filter out non-public query vars
             global $wp;