wp-pass.php double stripslashes() input
|Reported by:||rob1n||Owned by:||rob1n|
wp-pass.php require()'s wp-config.php, which in turn requires wp-settings.php, which goes through and stripslashes_deep() the GPC variables if magic_quotes_gpc is on.
Yet, wp-pass.php does this over again.
Change History (6)
- Cc rboren rob1n removed
- Keywords has-patch 2nd-opinion removed
- Resolution set to invalid
- Status changed from new to closed
Note: See TracTickets for help on using tickets.