Changeset 13793 for trunk/src/bp-core/bp-core-attachments.php

Timestamp:

04/12/2024 01:28:59 PM (14 months ago)

Author:

espellcaste

Message:

Cast values used in the ctype_digit function to a string.

Argument of type int will be interpreted as string in the future.

Closes ​https://github.com/buddypress/buddypress/pull/265
See #8649
Fixes #9125

File:

• trunk/src/bp-core/bp-core-attachments.php (modified) (1 diff)

trunk/src/bp-core/bp-core-attachments.php

@@ -1574 +1574 @@
     }
 
-    if ( empty( $_POST['object'] ) || empty( $_POST['item_id'] ) || ( ! ctype_digit( $_POST['item_id'] ) && ! is_int( $_POST['item_id'] ) ) ) {
+    if ( empty( $_POST['object'] ) || empty( $_POST['item_id'] ) || ( ! ctype_digit( (string) $_POST['item_id'] ) && ! is_int( $_POST['item_id'] ) ) ) {
         wp_send_json_error();
     }