Changeset 4706 for trunk/includes/users/functions.php

Timestamp:

01/22/2013 06:51:56 PM (13 years ago)

Author:

johnjamesjacoby

Message:

Prepare $username in bbp_user_maybe_convert_pass(). Props Maty.

File:

• trunk/includes/users/functions.php (modified) (1 diff)

trunk/includes/users/functions.php

@@ -1125 +1125 @@
 
     // Bail if no user password to convert
-    $row = $wpdb->get_row( "SELECT * FROM {$wpdb->users} INNER JOIN {$wpdb->usermeta} ON user_id = ID WHERE meta_key = '_bbp_class' AND user_login = '{$username}' LIMIT 1" );
+    $row = $wpdb->get_row( $wpdb->prepare( "SELECT * FROM {$wpdb->users} INNER JOIN {$wpdb->usermeta} ON user_id = ID WHERE meta_key = '_bbp_class' AND user_login = '%s' LIMIT 1", $username ) );
     if ( empty( $row ) || is_wp_error( $row ) )
         return;