Support quotes and double quotes when resetting password

apppresser · Mar 30, 2023 · 6e33471 · 6e33471
1 parent b6ea44c
commit 6e33471
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/inc/AppPresser_WPAPI_Mods.php b/inc/AppPresser_WPAPI_Mods.php
@@ -680,11 +680,10 @@ public function get_short_reset_code() {
 	 */
 	public function validate_reset_password( $request ) {
 
-		global $wpdb;
 		$return;
 
-		$code 		= $request['code'];
-		$password 	= $request['password'];
+        $code = sanitize_text_field($request['code']);
+        $password = sanitize_text_field(addslashes($request['password']));
 
 		$user = get_users( array( 'meta_key' => 'app_hash', 'meta_value' => $code ) );