Changeset 10592 for trunk/src/bp-xprofile/classes/class-bp-xprofile-field-type.php

Timestamp:

02/14/2016 01:48:59 PM (9 years ago)

Author:

dcavins

Message:

Profile: Improve validation in is_valid().

When checking a submitted array of values,
ensure that the foreach breaks when an
invalid value is encountered. Previously,
the foreach returned the validity of the
last element in the array.

Also update unit tests so that invalid values
appear in various positions in the array of
values to check.

Fixes #6884.

File:

• trunk/src/bp-xprofile/classes/class-bp-xprofile-field-type.php (modified) (1 diff)

trunk/src/bp-xprofile/classes/class-bp-xprofile-field-type.php

@@ -207 +207 @@
         }
 
-        // If there's a whitelist set, also check the $value.
+        // If there's a whitelist set, make sure that each value is a whitelisted value.
         if ( ( true === $validated ) && ! empty( $values ) && ! empty( $this->validation_whitelist ) ) {
             foreach ( (array) $values as $value ) {
-                $validated = in_array( $value, $this->validation_whitelist, true );
+                if ( ! in_array( $value, $this->validation_whitelist, true ) ) {
+                    $validated = false;
+                    break;
+                }
             }
         }