Changeset 14051 for branches/14.0/src/bp-core/bp-core-avatars.php

Timestamp:

10/22/2024 08:51:48 PM (23 months ago)

Author:

imath

Message:

14.2.1 version bumps (branch 14.0)

File:

• branches/14.0/src/bp-core/bp-core-avatars.php (modified) (9 diffs)

branches/14.0/src/bp-core/bp-core-avatars.php

@@ -1219 +1219 @@
  */
 function bp_avatar_handle_capture( $data = '', $item_id = 0, $retval = 'boolean' ) {
-        $return = $retval;
+        $return  = $retval;
+        $item_id = (int) $item_id;
 
         if ( empty( $data ) || empty( $item_id ) ) {
@@ -1391 +1392 @@
         }
 
+        // Sanitize object id.
+        $item_id = (int) $avatar_data['item_id'];
+
         // Capability check.
         if ( ! bp_attachments_current_user_can( 'edit_avatar', $avatar_data ) ) {
@@ -1404 +1408 @@
                 }
 
-                $cropped_webcam_avatar = bp_avatar_handle_capture( $webcam_avatar, $avatar_data['item_id'], 'array' );
+                $cropped_webcam_avatar = bp_avatar_handle_capture( $webcam_avatar, $item_id, 'array' );
 
                 if ( ! $cropped_webcam_avatar ) {
@@ -1419 +1423 @@
                                                 array(
                                                         'object'  => $avatar_data['object'],
-                                                        'item_id' => $avatar_data['item_id'],
+                                                        'item_id' => $item_id,
                                                         'html'    => false,
                                                         'type'    => 'full',
@@ -1426 +1430 @@
                                 ),
                                 'feedback_code' => 2,
-                                'item_id'       => $avatar_data['item_id'],
+                                'item_id'       => $item_id,
                         );
 
                         /** This action is documented in wp-includes/deprecated.php */
-                        do_action_deprecated( 'xprofile_avatar_uploaded', array( (int) $avatar_data['item_id'], $avatar_data['type'], $avatar_data ), '6.0.0', 'bp_members_avatar_uploaded' );
+                        do_action_deprecated( 'xprofile_avatar_uploaded', array( $item_id, $avatar_data['type'], $avatar_data ), '6.0.0', 'bp_members_avatar_uploaded' );
 
                         /**
@@ -1443 +1447 @@
                          * @param array  $cropped_webcam_avatar Array containing the full, thumb avatar and the timestamp.
                          */
-                        do_action( 'bp_members_avatar_uploaded', (int) $avatar_data['item_id'], $avatar_data['type'], $avatar_data, $cropped_webcam_avatar );
+                        do_action( 'bp_members_avatar_uploaded', $item_id, $avatar_data['type'], $avatar_data, $cropped_webcam_avatar );
 
                         wp_send_json_success( $return );
@@ -1464 +1468 @@
         // Crop args.
         $r = array(
-                'item_id'       => $avatar_data['item_id'],
+                'item_id'       => $item_id,
                 'object'        => $avatar_data['object'],
                 'avatar_dir'    => $avatar_dir,
@@ -1483 +1487 @@
                                         array(
                                                 'object'  => $avatar_data['object'],
-                                                'item_id' => $avatar_data['item_id'],
+                                                'item_id' => $item_id,
                                                 'html'    => false,
                                                 'type'    => 'full',
@@ -1490 +1494 @@
                         ),
                         'feedback_code' => 2,
-                        'item_id'       => $avatar_data['item_id'],
+                        'item_id'       => $item_id,
                 );
 
                 if ( 'user' === $avatar_data['object'] ) {
                         /** This action is documented in wp-includes/deprecated.php */
-                        do_action_deprecated( 'xprofile_avatar_uploaded', array( (int) $avatar_data['item_id'], $avatar_data['type'], $r ), '6.0.0', 'bp_members_avatar_uploaded' );
+                        do_action_deprecated( 'xprofile_avatar_uploaded', array( $item_id, $avatar_data['type'], $r ), '6.0.0', 'bp_members_avatar_uploaded' );
 
                         /** This action is documented in bp-core/bp-core-avatars.php */
-                        do_action( 'bp_members_avatar_uploaded', (int) $avatar_data['item_id'], $avatar_data['type'], $r, $cropped_avatar );
+                        do_action( 'bp_members_avatar_uploaded', $item_id, $avatar_data['type'], $r, $cropped_avatar );
                 } elseif ( 'group' === $avatar_data['object'] ) {
                         /** This action is documented in bp-groups/bp-groups-screens.php */
-                        do_action( 'groups_avatar_uploaded', (int) $avatar_data['item_id'], $avatar_data['type'], $r, $cropped_avatar );
+                        do_action( 'groups_avatar_uploaded', $item_id, $avatar_data['type'], $r, $cropped_avatar );
                 }