WordPress-C/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2025-02-16 19:46:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

Query: Ensure that the page parameter is scalar in WP_Query::get_posts().

Browse Source 
The `page` query var only accepts a scalar value and passes the value through functions that assume a scalar value.

Adding an extra guard condition does not affect its functionality but does avoid a PHP fatal error for `trim()` when a non-scalar value such as an array is passed.

Follow-up to [2535], [53891].

Props brookedot, rlmc, mukesh27, SergeyBiryukov.
Fixes #56558.
Built from https://develop.svn.wordpress.org/trunk@56815


git-svn-id: http://core.svn.wordpress.org/trunk@56327 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
Sergey Biryukov 2023-10-10 11:22:24 +00:00
parent 57ecd6c091
commit 330f070340
2 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
wp-includes/class-wp-query.php
View File

@ -2020,8 +2020,7 @@ class WP_Query {
} }
if ( isset( $q['page'] ) ) { if ( isset( $q['page'] ) ) {
$q['page'] = trim( $q['page'], '/' ); $q['page'] = is_scalar( $q['page'] ) ? absint( trim( $q['page'], '/' ) ) : 0;
$q['page'] = absint( $q['page'] );
} }
// If true, forcibly turns off SQL_CALC_FOUND_ROWS even when limits are present. // If true, forcibly turns off SQL_CALC_FOUND_ROWS even when limits are present.

2
wp-includes/version.php
View File

@ -16,7 +16,7 @@
* *
* @global string $wp_version * @global string $wp_version
*/ */
$wp_version = '6.4-beta2-56814'; $wp_version = '6.4-beta2-56815';
/** /**
* Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema. * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.