Ticket #7197: wp-patch-quotes.diff

wp-admin/includes/user.php

@@ -39 +39 @@
         if ( isset( $_POST['pass2'] ))
                 $pass2 = $_POST['pass2'];
 
+        if (get_magic_quotes_gpc()) {
+                $pass1 = stripslashes($pass1);
+                $pass2 = stripslashes($pass2);
+        }
+
         if ( isset( $_POST['role'] ) && current_user_can( 'edit_users' ) ) {
                 if( $user_id != $current_user->id || $wp_roles->role_objects[$_POST['role']]->has_cap( 'edit_users' ))
                         $user->role = $_POST['role'];

wp-includes/user.php

@@ -19 +19 @@
         else
                 $credentials['remember'] = false;
 
+        if ( get_magic_quotes_gpc() )
+                $credentials['user_password'] = stripslashes($credentials['user_password']);
+
         do_action_ref_array('wp_authenticate', array(&$credentials['user_login'], &$credentials['user_password']));
 
         // If no credential info provided, check cookie.