Add prohphylactic addlashes when evaling query. Props xknown.

git-svn-id: https://develop.svn.wordpress.org/trunk@8510 602fd350-edb4-49c9-b593-d223f7449a82
2026-08-11 20:30:23 +00:00 · 2008-07-30 17:17:38 +00:00
parent fc84847f4c
commit 22497fb74f
2 changed files with 2 additions and 2 deletions
@@ -110,7 +110,7 @@ class WP {
 					$query = preg_replace("!^.+\?!", '', $query);

 					// Substitute the substring matches into the query.
-					eval("\$query = \"$query\";");
+					eval("\$query = \"" . addslashes($query) . "\";");
 					$this->matched_query = $query;

 					// Parse the query.