Changeset 5591

Timestamp:

01/10/2015 10:58:37 PM (10 years ago)

Author:

johnjamesjacoby

Message:

Use sanitize_key() in bbp_profile_update_role() to ensure role value is within expected boundaries. See #2742.

File:

• trunk/src/includes/users/capabilities.php (modified) (1 diff)

trunk/src/includes/users/capabilities.php

@@ -199 +199 @@
     }
 
-    // Fromus role we want the user to have
-    $new_role    = sanitize_text_field( $_POST['bbp-forums-role'] );
+    // Forums role we want the user to have
+    $new_role    = sanitize_key( $_POST['bbp-forums-role'] );
     $forums_role = bbp_get_user_role( $user_id );