Changeset 11725 for trunk/src/bp-templates/bp-legacy/buddypress-functions.php

Timestamp:

11/02/2017 02:50:03 PM (9 years ago)

Author:

boonebgorges

Message:

Improved handling of encoded characters when parsing AJAX querystring.

Props jdgrimes.

File:

• trunk/src/bp-templates/bp-legacy/buddypress-functions.php (modified) (2 diffs)

trunk/src/bp-templates/bp-legacy/buddypress-functions.php

@@ -689 +689 @@
         // Activity stream filtering on action.
         if ( ! empty( $_BP_COOKIE['bp-' . $object . '-filter'] ) && '-1' != $_BP_COOKIE['bp-' . $object . '-filter'] ) {
-                $qs[] = 'type=' . $_BP_COOKIE['bp-' . $object . '-filter'];
+                $qs[] = 'type=' . urlencode( $_BP_COOKIE['bp-' . $object . '-filter'] );
 
                 if ( bp_is_active( 'activity' ) ) {
@@ -712 +712 @@
                 // Activity stream scope only on activity directory.
                 if ( 'all' != $_BP_COOKIE['bp-' . $object . '-scope'] && ! bp_displayed_user_id() && ! bp_is_single_item() )
-                        $qs[] = 'scope=' . $_BP_COOKIE['bp-' . $object . '-scope'];
+                        $qs[] = 'scope=' . urlencode( $_BP_COOKIE['bp-' . $object . '-scope'] );
         }