Changeset 60239

Timestamp:

05/16/2025 01:21:35 PM (9 months ago)

Author:

SergeyBiryukov

Message:

Login and Registration: Check that action is a string in wp-login.php.

This prevents a PHP warning if an array is passed instead.

Follow-up to [1974], [6643], [6711], [41782], [58023], [58093].

Props leedxw, dilipbheda.
Fixes #63434.

File:

• trunk/src/wp-login.php (modified) (1 diff)

trunk/src/wp-login.php

@@ -480 +480 @@
  */
 
-$action = isset( $_REQUEST['action'] ) ? $_REQUEST['action'] : 'login';
+$action = isset( $_REQUEST['action'] ) && is_string( $_REQUEST['action'] ) ? $_REQUEST['action'] : 'login';
 $errors = new WP_Error();