From 70c17cc8713053673a6f307cf4983e799d14ce35 Mon Sep 17 00:00:00 2001 From: ryan Date: Fri, 11 May 2007 00:56:12 +0000 Subject: [PATCH] Escapage git-svn-id: http://svn.automattic.com/wordpress/trunk@5441 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-includes/pluggable.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/wp-includes/pluggable.php b/wp-includes/pluggable.php index a560df001..eb2d7bcc1 100644 --- a/wp-includes/pluggable.php +++ b/wp-includes/pluggable.php @@ -121,6 +121,8 @@ function get_userdatabylogin($user_login) { if ( $userdata ) return $userdata; + $user_login = $wpdb->escape($user_login); + if ( !$user = $wpdb->get_row("SELECT * FROM $wpdb->users WHERE user_login = '$user_login'") ) return false;