Changeset 5588

Timestamp:

01/10/2015 10:55:39 PM (10 years ago)

Author:

johnjamesjacoby

Message:

Use sanitize_key() in bbp_get_form_reply_status_dropdown() to ensure value is within expected boundaries. See #2742.

File:

• trunk/src/includes/replies/template.php (modified) (1 diff)

trunk/src/includes/replies/template.php

@@ -2802 +2802 @@
             // Post value is passed
             if ( bbp_is_reply_form_post_request() && isset( $_POST[ $r['select_id'] ] ) ) {
-                $r['selected'] = $_POST[ $r['select_id'] ];
+                $r['selected'] = sanitize_key( $_POST[ $r['select_id'] ] );
 
             // No Post value was passed