From 7c2178cabab9777fb5acdd3f091997abf49c6767 Mon Sep 17 00:00:00 2001 From: Andrew Nacin Date: Sat, 27 Feb 2010 20:26:37 +0000 Subject: [PATCH] Escape mod_$theme option name. see #9015 git-svn-id: https://develop.svn.wordpress.org/trunk@13469 602fd350-edb4-49c9-b593-d223f7449a82 --- wp-includes/theme.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wp-includes/theme.php b/wp-includes/theme.php index 6168facfcc..5375ab31f6 100644 --- a/wp-includes/theme.php +++ b/wp-includes/theme.php @@ -1200,7 +1200,7 @@ function validate_current_theme() { function get_theme_mod($name, $default = false) { $theme = get_current_theme(); - $mods = get_option("mods_$theme"); + $mods = get_option( esc_sql( "mods_$theme" ) ); if ( isset($mods[$name]) ) return apply_filters( "theme_mod_$name", $mods[$name] );