From 7199d04255295cd39341f8b89582c7a825aca7ac Mon Sep 17 00:00:00 2001 From: Ryan Boren Date: Tue, 11 Aug 2009 05:29:36 +0000 Subject: [PATCH] Enforce activation key to be a string. git-svn-id: https://develop.svn.wordpress.org/trunk@11799 602fd350-edb4-49c9-b593-d223f7449a82 --- wp-login.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wp-login.php b/wp-login.php index 9e57f19b04..6ce312de68 100644 --- a/wp-login.php +++ b/wp-login.php @@ -187,7 +187,7 @@ function reset_password($key) { $key = preg_replace('/[^a-z0-9]/i', '', $key); - if ( empty( $key ) || is_array( $key ) ) + if ( empty( $key ) || !is_string( $key ) ) return new WP_Error('invalid_key', __('Invalid key')); $user = $wpdb->get_row($wpdb->prepare("SELECT * FROM $wpdb->users WHERE user_activation_key = %s", $key));