From 0a875e8b2269d746ed41f0cb3f866cf0ff80810f Mon Sep 17 00:00:00 2001 From: ryan Date: Mon, 18 Feb 2008 20:16:02 +0000 Subject: [PATCH] Make user option name sanitization consistent. Props filosofo. fixes #5901 git-svn-id: http://svn.automattic.com/wordpress/trunk@6902 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-includes/user.php | 1 + 1 file changed, 1 insertion(+) diff --git a/wp-includes/user.php b/wp-includes/user.php index 6878023203..83d85fb3bd 100644 --- a/wp-includes/user.php +++ b/wp-includes/user.php @@ -82,6 +82,7 @@ function user_pass_ok($user_login,$user_pass) { function get_user_option( $option, $user = 0 ) { global $wpdb; + $option = preg_replace('|[^a-z0-9_]|i', '', $option); if ( empty($user) ) $user = wp_get_current_user(); else