Changeset 6712

Timestamp:

01/07/2013 02:19:51 PM (13 years ago)

Author:

boonebgorges

Message:

Sanitize 'exclude' parameter in BP_Groups_Member::get_all_for_group()

File:

• trunk/bp-groups/bp-groups-classes.php (modified) (1 diff)

trunk/bp-groups/bp-groups-classes.php

@@ -1227 +1227 @@
 
         $exclude_sql = '';
-        if ( !empty( $exclude ) )
+        if ( !empty( $exclude ) ) {
+            $exclude = implode( ',', wp_parse_id_list( $exclude ) );
             $exclude_sql = " AND m.user_id NOT IN ({$exclude})";
+        }
 
         if ( bp_is_active( 'xprofile' ) ) {