Fix starring of a friend

akirk · Nov 21, 2024 · 2484aa7 · 2484aa7
1 parent d01052c
commit 2484aa7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/includes/class-frontend.php b/includes/class-frontend.php
@@ -759,7 +759,7 @@ public function ajax_star_friend_user() {
 			exit;
 		}
 
-		$friend_id = intval( $_POST['friend_id'] );
+		$friend_id = sanitize_text_field( wp_unslash( $_POST['friend_id'] ) );
 		check_ajax_referer( "star-$friend_id" );
 
 		$friend_user = User::get_by_username( $friend_id );