Opened 3 years ago
Closed 21 months ago
#14516 closed defect (bug) (duplicate)
Must stripslash input fields for db install
| Reported by: |
|
Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | |
| Component: | Upgrade/Install | Version: | 3.0.1 |
| Severity: | normal | Keywords: | has-patch |
| Cc: | johan.eenfeldt@… |
Description
During WordPress database install we must stripslash the input fields.
For database name, database username and database password \, ', and " are valid characters. For dbhost "strange" characters probably aren't valid, but we should handle it correctly anyway.
For prefix there is no need to stripslash as we immediately make sure it only contains letters, numbers and underscores. (mysql allows other characters, but it is probably wise to limit it anyway).
Attachments (2)
Change History (10)
- Cc johan.eenfeldt@… added
Please wait.
Obviously we must then addslashes() when saving to wp-config.php. Updating and actually testing patch!
comment:8
SergeyBiryukov — 21 months ago
- Milestone Future Release deleted
- Resolution set to duplicate
- Status changed from new to closed
Note: See
TracTickets for help on using
tickets.

Stripslash input during db install