Changeset 7024 for trunk/bp-core/bp-core-cache.php

Timestamp:

05/08/2013 08:27:22 PM (12 years ago)

Author:

boonebgorges

Message:

Improved sanitization for Core component database methods

All constructed IN clauses for integer values are now run through
wp_parse_id_list().

Also adds tests for the relevant methods.

Fixes #4992

Props johnjamesjacoby, DJPaul

File:

• trunk/bp-core/bp-core-cache.php (modified) (1 diff)

trunk/bp-core/bp-core-cache.php

@@ -93 +93 @@
     }
 
-    if ( !is_array( $object_ids ) ) {
-        $object_ids = preg_replace( '|[^0-9,]|', '', $object_ids );
-        $object_ids = explode( ',', $object_ids );
-    }
-
-    $object_ids = array_map( 'intval', $object_ids );
+    $object_ids = wp_parse_id_list( $object_ids );
 
     $cache = array();