From 0d3ca6acdd0df95c83fc59699ccdbfc040cf7642 Mon Sep 17 00:00:00 2001 From: Andrew Nacin Date: Thu, 27 Jun 2013 02:46:23 +0000 Subject: [PATCH] Add strict check in wp_xmlrpc_server::set_custom_fields(). The slash strip ensures these values are the same data type, but it might not be that way forever. props xknown. git-svn-id: https://develop.svn.wordpress.org/trunk@24521 602fd350-edb4-49c9-b593-d223f7449a82 --- wp-includes/class-wp-xmlrpc-server.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wp-includes/class-wp-xmlrpc-server.php b/wp-includes/class-wp-xmlrpc-server.php index 98bfe00d5b..74b26f3b0e 100644 --- a/wp-includes/class-wp-xmlrpc-server.php +++ b/wp-includes/class-wp-xmlrpc-server.php @@ -281,7 +281,7 @@ class wp_xmlrpc_server extends IXR_Server { $pmeta = get_metadata_by_mid( 'post', $meta['id'] ); if ( isset($meta['key']) ) { $meta['key'] = wp_unslash( $meta['key'] ); - if ( $meta['key'] != $pmeta->meta_key ) + if ( $meta['key'] !== $pmeta->meta_key ) continue; $meta['value'] = wp_unslash( $meta['value'] ); if ( current_user_can( 'edit_post_meta', $post_id, $meta['key'] ) )