Escapage

git-svn-id: http://svn.automattic.com/wordpress/trunk@5441 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2007-05-11 00:56:12 +00:00 · 2007-05-11 00:56:12 +00:00 · 70c17cc871
parent f7de9ede8a
commit 70c17cc871
1 changed files with 2 additions and 0 deletions
--- a/wp-includes/pluggable.php
+++ b/wp-includes/pluggable.php
@ -121,6 +121,8 @@ function get_userdatabylogin($user_login) {
 	if ( $userdata )
 		return $userdata;

+	$user_login = $wpdb->escape($user_login);
+
 	if ( !$user = $wpdb->get_row("SELECT * FROM $wpdb->users WHERE user_login = '$user_login'") )
 		return false;