Changeset 5681 for trunk/src/includes/topics/template.php

Timestamp:

04/15/2015 02:21:32 PM (12 years ago)

Author:

johnjamesjacoby

Message:

Topics: Use sanitize_key() on select_id in dropdown helpers.

File:

• trunk/src/includes/topics/template.php (modified) (2 diffs)

trunk/src/includes/topics/template.php

@@ -3291 +3291 @@
                         // Post value is passed
                         if ( bbp_is_topic_form_post_request() && isset( $_POST[ $r['select_id'] ] ) ) {
-                                $r['selected'] = $_POST[ $r['select_id'] ];
+                                $r['selected'] = sanitize_key( $_POST[ $r['select_id'] ] );
 
                         // No Post value passed
@@ -3380 +3380 @@
                         // Post value is passed
                         if ( bbp_is_topic_form_post_request() && isset( $_POST[ $r['select_id'] ] ) ) {
-                                $r['selected'] = $_POST[ $r['select_id'] ];
+                                $r['selected'] = sanitize_key( $_POST[ $r['select_id'] ] );
 
                         // No Post value was passed