Changeset 14051 for branches/14.0/src/bp-core/bp-core-avatars.php

Timestamp:

10/22/2024 08:51:48 PM (14 months ago)

Author:

imath

Message:

14.2.1 version bumps (branch 14.0)

File:

• branches/14.0/src/bp-core/bp-core-avatars.php (modified) (9 diffs)

branches/14.0/src/bp-core/bp-core-avatars.php

@@ -1219 +1219 @@
  */
 function bp_avatar_handle_capture( $data = '', $item_id = 0, $retval = 'boolean' ) {
-    $return = $retval;
+    $return  = $retval;
+    $item_id = (int) $item_id;
 
     if ( empty( $data ) || empty( $item_id ) ) {
@@ -1391 +1392 @@
     }
 
+    // Sanitize object id.
+    $item_id = (int) $avatar_data['item_id'];
+
     // Capability check.
     if ( ! bp_attachments_current_user_can( 'edit_avatar', $avatar_data ) ) {
@@ -1404 +1408 @@
         }
 
-        $cropped_webcam_avatar = bp_avatar_handle_capture( $webcam_avatar, $avatar_data['item_id'], 'array' );
+        $cropped_webcam_avatar = bp_avatar_handle_capture( $webcam_avatar, $item_id, 'array' );
 
         if ( ! $cropped_webcam_avatar ) {
@@ -1419 +1423 @@
                         array(
                             'object'  => $avatar_data['object'],
-                            'item_id' => $avatar_data['item_id'],
+                            'item_id' => $item_id,
                             'html'    => false,
                             'type'    => 'full',
@@ -1426 +1430 @@
                 ),
                 'feedback_code' => 2,
-                'item_id'       => $avatar_data['item_id'],
+                'item_id'       => $item_id,
             );
 
             /** This action is documented in wp-includes/deprecated.php */
-            do_action_deprecated( 'xprofile_avatar_uploaded', array( (int) $avatar_data['item_id'], $avatar_data['type'], $avatar_data ), '6.0.0', 'bp_members_avatar_uploaded' );
+            do_action_deprecated( 'xprofile_avatar_uploaded', array( $item_id, $avatar_data['type'], $avatar_data ), '6.0.0', 'bp_members_avatar_uploaded' );
 
             /**
@@ -1443 +1447 @@
              * @param array  $cropped_webcam_avatar Array containing the full, thumb avatar and the timestamp.
              */
-            do_action( 'bp_members_avatar_uploaded', (int) $avatar_data['item_id'], $avatar_data['type'], $avatar_data, $cropped_webcam_avatar );
+            do_action( 'bp_members_avatar_uploaded', $item_id, $avatar_data['type'], $avatar_data, $cropped_webcam_avatar );
 
             wp_send_json_success( $return );
@@ -1464 +1468 @@
     // Crop args.
     $r = array(
-        'item_id'       => $avatar_data['item_id'],
+        'item_id'       => $item_id,
         'object'        => $avatar_data['object'],
         'avatar_dir'    => $avatar_dir,
@@ -1483 +1487 @@
                     array(
                         'object'  => $avatar_data['object'],
-                        'item_id' => $avatar_data['item_id'],
+                        'item_id' => $item_id,
                         'html'    => false,
                         'type'    => 'full',
@@ -1490 +1494 @@
             ),
             'feedback_code' => 2,
-            'item_id'       => $avatar_data['item_id'],
+            'item_id'       => $item_id,
         );
 
         if ( 'user' === $avatar_data['object'] ) {
             /** This action is documented in wp-includes/deprecated.php */
-            do_action_deprecated( 'xprofile_avatar_uploaded', array( (int) $avatar_data['item_id'], $avatar_data['type'], $r ), '6.0.0', 'bp_members_avatar_uploaded' );
+            do_action_deprecated( 'xprofile_avatar_uploaded', array( $item_id, $avatar_data['type'], $r ), '6.0.0', 'bp_members_avatar_uploaded' );
 
             /** This action is documented in bp-core/bp-core-avatars.php */
-            do_action( 'bp_members_avatar_uploaded', (int) $avatar_data['item_id'], $avatar_data['type'], $r, $cropped_avatar );
+            do_action( 'bp_members_avatar_uploaded', $item_id, $avatar_data['type'], $r, $cropped_avatar );
         } elseif ( 'group' === $avatar_data['object'] ) {
             /** This action is documented in bp-groups/bp-groups-screens.php */
-            do_action( 'groups_avatar_uploaded', (int) $avatar_data['item_id'], $avatar_data['type'], $r, $cropped_avatar );
+            do_action( 'groups_avatar_uploaded', $item_id, $avatar_data['type'], $r, $cropped_avatar );
         }