Changeset 18712

Timestamp:

09/19/2011 04:17:26 AM (14 years ago)

Author:

dd32

Message:

Allow Apostrophes in Post Passwords. $_POST and $_COOKIE are always slashed. Fixes #17145

Location:

trunk

Files:

• wp-includes/post-template.php (modified) (1 diff)
• wp-pass.php (modified) (1 diff)

trunk/wp-includes/post-template.php

@@ -565 +565 @@
         return true;
 
-    if ( $_COOKIE['wp-postpass_' . COOKIEHASH] != $post->post_password )
+    if ( stripslashes( $_COOKIE['wp-postpass_' . COOKIEHASH] ) != $post->post_password )
         return true;
 

trunk/wp-pass.php

@@ -10 +10 @@
 require( dirname(__FILE__) . '/wp-load.php');
 
-if ( get_magic_quotes_gpc() )
-    $_POST['post_password'] = stripslashes($_POST['post_password']);
-
 // 10 days
-setcookie('wp-postpass_' . COOKIEHASH, $_POST['post_password'], time() + 864000, COOKIEPATH);
+setcookie('wp-postpass_' . COOKIEHASH, stripslashes( $_POST['post_password'] ), time() + 864000, COOKIEPATH);
 
 wp_safe_redirect(wp_get_referer());