From 38aa5714845acbf03e945793ab156ed2bf062b6b Mon Sep 17 00:00:00 2001
From: azaozz <azaozz@1a063a9b-81f0-0310-95a4-ce76da25c4cd>
Date: Wed, 30 Jul 2008 08:16:56 +0000
Subject: [PATCH] Allow comma-separated post_status values in WP_Query. Props
 markjaquith, fixes #7423 for 2.7

git-svn-id: http://svn.automattic.com/wordpress/trunk@8504 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-includes/query.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wp-includes/query.php b/wp-includes/query.php
index 8f0961e836..4c096b2ec1 100644
--- a/wp-includes/query.php
+++ b/wp-includes/query.php
@@ -773,7 +773,7 @@ class WP_Query {
 			$qv['post_type'] = sanitize_user($qv['post_type'], true);
 
 		if ( !empty($qv['post_status']) )
-			$qv['post_status'] = sanitize_user($qv['post_status'], true);
+			$qv['post_status'] = preg_replace('|[^a-z0-9_,-]|', '', $qv['post_status']);
 
 		if ( $this->is_posts_page && !$qv['withcomments'] )
 			$this->is_comment_feed = false;