Reject activation keys that are arrays.

git-svn-id: http://svn.automattic.com/wordpress/branches/2.8@11798 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2009-08-11 04:53:57 +00:00 · 2009-08-11 04:53:57 +00:00 · 260fe48798
parent 9775268b25
commit 260fe48798
1 changed files with 1 additions and 1 deletions
--- a/wp-login.php
+++ b/wp-login.php
@ -187,7 +187,7 @@ function reset_password($key) {

 	$key = preg_replace('/[^a-z0-9]/i', '', $key);

-	if ( empty( $key ) )
+	if ( empty( $key ) || is_array( $key ) )
 		return new WP_Error('invalid_key', __('Invalid key'));

 	$user = $wpdb->get_row($wpdb->prepare("SELECT * FROM $wpdb->users WHERE user_activation_key = %s", $key));