Changeset 6713

Timestamp:

01/07/2013 02:20:53 PM (14 years ago)

Author:

boonebgorges

Message:

Sanitize 'exclude' parameter in BP_Groups_Member::get_all_for_group()

File:

• branches/1.6/bp-groups/bp-groups-classes.php (modified) (1 diff)

branches/1.6/bp-groups/bp-groups-classes.php

@@ -1181 +1181 @@
 
                 $exclude_sql = '';
-                if ( !empty( $exclude ) )
+                if ( !empty( $exclude ) ) {
+                        $exclude = implode( ',', wp_parse_id_list( $exclude ) );
                         $exclude_sql = " AND m.user_id NOT IN ({$exclude})";
+                }
 
                 if ( bp_is_active( 'xprofile' ) )