Changeset 13793 for trunk/src/bp-core/bp-core-attachments.php

Timestamp:

04/12/2024 01:28:59 PM (3 years ago)

Author:

espellcaste

Message:

Cast values used in the ctype_digit function to a string.

Argument of type int will be interpreted as string in the future.

Closes ​https://github.com/buddypress/buddypress/pull/265
See #8649
Fixes #9125

File:

• trunk/src/bp-core/bp-core-attachments.php (modified) (1 diff)

trunk/src/bp-core/bp-core-attachments.php

@@ -1574 +1574 @@
         }
 
-        if ( empty( $_POST['object'] ) || empty( $_POST['item_id'] ) || ( ! ctype_digit( $_POST['item_id'] ) && ! is_int( $_POST['item_id'] ) ) ) {
+        if ( empty( $_POST['object'] ) || empty( $_POST['item_id'] ) || ( ! ctype_digit( (string) $_POST['item_id'] ) && ! is_int( $_POST['item_id'] ) ) ) {
                 wp_send_json_error();
         }