Ticket #7155: 7155.diff

src/bp-xprofile/classes/class-bp-xprofile-field.php

@@ -263 +263 @@
                         $args = (array) $args;
                 }
 
+                $int_fields = array(
+                        'can_delete',
+                        'field_order',
+                        'group_id',
+                        'id',
+                        'is_default_option',
+                        'is_required',
+                        'option_order',
+                        'parent_id',
+                );
+
                 foreach ( $args as $k => $v ) {
                         if ( 'name' === $k || 'description' === $k ) {
                                 $v = stripslashes( $v );
+                        } elseif ( in_array( $k, $int_fields, true ) ) {
+                                $v = absint( $v );
                         }
+
                         $this->{$k} = $v;
                 }
 

src/bp-xprofile/classes/class-bp-xprofile-group.php

@@ -553 +553 @@
                                 // and add it to the cache.
                                 foreach ( (array) $queried_gdata as $gdata ) {
 
+                                        // Enforce type.
+                                        foreach ( $gdata as $k => &$v ) {
+                                                if ( in_array( $k, array( 'can_delete', 'group_order', 'id', ), true ) ) {
+                                                        $v = absint( $v );
+                                                }
+                                        }
+
                                         // Add group to groups array.
                                         $groups[ $gdata->id ] = $gdata;