Escapage

git-svn-id: http://svn.automattic.com/wordpress/branches/2.2@5440 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2007-05-11 00:55:59 +00:00 · 2007-05-11 00:55:59 +00:00 · 9532679648
parent 65ffc78548
commit 9532679648
1 changed files with 2 additions and 0 deletions
--- a/wp-includes/pluggable.php
+++ b/wp-includes/pluggable.php
@ -121,6 +121,8 @@ function get_userdatabylogin($user_login) {
 	if ( $userdata )
 		return $userdata;

+	$user_login = $wpdb->escape($user_login);
+
 	if ( !$user = $wpdb->get_row("SELECT * FROM $wpdb->users WHERE user_login = '$user_login'") )
 		return false;