WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Escape hyphen in regex. Props chrisbliss18. fixes #8548 #9244 

git-svn-id: http://svn.automattic.com/wordpress/trunk@10676 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
ryan 2009-03-01 19:57:37 +00:00
parent cc26b0347f
commit ebe8aa4804
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
wp-includes/theme.php
View File

@ -849,7 +849,7 @@ function preview_theme() {
if ( !current_user_can( 'switch_themes' ) ) if ( !current_user_can( 'switch_themes' ) )
return; return;
$_GET['template'] = preg_replace('|[^a-z0-9_.-/]|i', '', $_GET['template']); $_GET['template'] = preg_replace('|[^a-z0-9_.\-/]|i', '', $_GET['template']);
if ( validate_file($_GET['template']) ) if ( validate_file($_GET['template']) )
return; return;
@ -857,7 +857,7 @@ function preview_theme() {
add_filter('template', create_function('', "return '{$_GET['template']}';") ); add_filter('template', create_function('', "return '{$_GET['template']}';") );
if ( isset($_GET['stylesheet']) ) { if ( isset($_GET['stylesheet']) ) {
$_GET['stylesheet'] = preg_replace('|[^a-z0-9_.-/]|i', '', $_GET['stylesheet']); $_GET['stylesheet'] = preg_replace('|[^a-z0-9_.\-/]|i', '', $_GET['stylesheet']);
if ( validate_file($_GET['stylesheet']) ) if ( validate_file($_GET['stylesheet']) )
return; return;
add_filter('stylesheet', create_function('', "return '{$_GET['stylesheet']}';") ); add_filter('stylesheet', create_function('', "return '{$_GET['stylesheet']}';") );