| @@ -612,9 +612,9 @@ | ||
| 612 | 612 | if ( is_user_logged_in() ) { |
| 613 | 613 | check_admin_referer( 'blogsub_subscribe_' . get_current_blog_id() ); |
| 614 | 614 | } |
| 615 | 615 | |
| 616 | - if ( empty( $_REQUEST['email'] ) ) | |
| 616 | + if ( empty( $_REQUEST['email'] ) || ! is_string( $_REQUEST['email'] ) ) | |
| 617 | 617 | return false; |
| 618 | 618 | |
| 619 | 619 | $redirect_fragment = false; |
| 620 | 620 | if ( isset( $_REQUEST['redirect_fragment'] ) ) { |
| @@ -619,9 +619,9 @@ | ||
| 619 | 619 | $redirect_fragment = false; |
| 620 | 620 | if ( isset( $_REQUEST['redirect_fragment'] ) ) { |
| 621 | 621 | $redirect_fragment = preg_replace( '/[^a-z0-9_-]/i', '', $_REQUEST['redirect_fragment'] ); |
| 622 | 622 | } |
| 623 | - if ( !$redirect_fragment ) { | |
| 623 | + if ( !$redirect_fragment || ! is_string( $redirect_fragment ) ) { | |
| 624 | 624 | $redirect_fragment = 'subscribe-blog'; |
| 625 | 625 | } |
| 626 | 626 | |
| 627 | 627 | $subscribe = Jetpack_Subscriptions::subscribe( |
