WordPress.org
Get WordPress

Plugin Directory

Changeset 3456870


Ignore:
Timestamp:
02/09/2026 09:04:44 AM (8 weeks ago)
Author:
interactivecalculator
Message:

security patch

File:
1 edited

Legend:

Unmodified
Added
Removed

  • interactivecalculator/trunk/interactivecalculator.php

    r3456849 r3456870  
    4949    }
    5050   
    51     // Sanitize the ID to allow only alphanumeric, hyphens, and underscores
    52     $safe_id = sanitize_key($attrs['id']);
     51    // Sanitize the ID to allow alphanumeric (including uppercase), hyphens, and underscores
     52    $safe_id = preg_replace('/[^a-zA-Z0-9_-]/', '', $attrs['id']);
    5353   
    5454    // Validate that sanitization didn't remove everything
Note: See TracChangeset for help on using the changeset viewer.