Ticket #5901 (closed defect (bug): fixed)

Opened 4 years ago

Last modified 4 years ago

Inconsistent user option name sanitization

Reported by: filosofo Owned by: anonymous
Priority: normal Milestone: 2.5
Component: General Version: 2.5
Severity: normal Keywords: update_user_option get_user_option has-patch sanitization
Cc: filosofo

Description

update_user_option sanitizes the option name, because it sends the option to update_usermeta which does the sanitizing. However, get_user_option doesn't sanitize the option name before checking whether the option is among the userdata. So, if your option name has non-kosher characters, you'll never be able to retrieve it using get_user_option.

The attached patch sanitizes the option in get_user_option.

Attachments

get_user_option-sanitization.diff Download (382 bytes) - added by filosofo 4 years ago.

Change History

filosofo — 4 years ago

comment:1   ryan — 4 years ago

  • Status changed from new to closed
  • Resolution set to fixed

(In [6902]) Make user option name sanitization consistent. Props filosofo. fixes #5901

Note: See TracTickets for help on using tickets.