Changeset 3643 for trunk/bp-core.php

Timestamp:

01/01/2011 09:36:22 PM (15 years ago)

Author:

djpaul

Message:

Escape xprofile base group name and fullname field name options on the settings screen. Fixes #2986

File:

• trunk/bp-core.php (modified) (1 diff)

trunk/bp-core.php

@@ -1174 +1174 @@
     if ( !$fullname = wp_cache_get( 'bp_user_fullname_' . $user_id, 'bp' ) ) {
         if ( bp_is_active( 'xprofile' ) ) {
-            $fullname = xprofile_get_field_data( $bp->site_options['bp-xprofile-fullname-field-name'], $user_id );
+            $fullname = xprofile_get_field_data( stripslashes( $bp->site_options['bp-xprofile-fullname-field-name'] ), $user_id );
 
             if ( empty($fullname) ) {