mirror of
https://github.com/10h30/ultimatemember.git
synced 2026-07-19 14:43:49 +09:00
- fixed vulnerability with banned keys (made them not case-sensitive);
This commit is contained in:
@@ -1557,7 +1557,7 @@ function um_submit_form_profile( $args ) {
|
||||
UM()->fields()->editing = true;
|
||||
|
||||
if ( ! empty( $args['submitted'] ) ) {
|
||||
$args['submitted'] = array_diff_key( $args['submitted'], array_flip( UM()->user()->banned_keys ) );
|
||||
$args['submitted'] = UM()->form()->clean_submitted_data( $args['submitted'] );
|
||||
}
|
||||
|
||||
/**
|
||||
|
||||
Reference in New Issue
Block a user