X-Git-Url: https://scripts.mit.edu/gitweb/autoinstalls/wordpress.git/blobdiff_plain/8f374b7233bc2815ccc387e448d208c5434eb961..53a5df18dd17a11c18781e78349feb3e139096b4:/wp-admin/load-scripts.php diff --git a/wp-admin/load-scripts.php b/wp-admin/load-scripts.php index 065ea9c9..8dfe3b18 100644 --- a/wp-admin/load-scripts.php +++ b/wp-admin/load-scripts.php @@ -51,6 +51,11 @@ function is_lighttpd_before_150() {} */ function add_action() {} +/** + * @ignore + */ +function did_action() {} + /** * @ignore */ @@ -109,8 +114,12 @@ function get_file($path) { return @file_get_contents($path); } -$load = preg_replace( '/[^a-z0-9,_-]+/i', '', $_GET['load'] ); -$load = explode(',', $load); +$load = $_GET['load']; +if ( is_array( $load ) ) + $load = implode( '', $load ); + +$load = preg_replace( '/[^a-z0-9,_-]+/i', '', $load ); +$load = array_unique( explode( ',', $load ) ); if ( empty($load) ) exit; @@ -120,7 +129,7 @@ require(ABSPATH . WPINC . '/version.php'); $compress = ( isset($_GET['c']) && $_GET['c'] ); $force_gzip = ( $compress && 'gzip' == $_GET['c'] ); -$expires_offset = 31536000; +$expires_offset = 31536000; // 1 year $out = ''; $wp_scripts = new WP_Scripts();