Make WordPress Core


Ignore:
Timestamp:
09/19/2011 04:17:26 AM (15 years ago)
Author:
dd32
Message:

Allow Apostrophes in Post Passwords. $_POST and $_COOKIE are always slashed. Fixes #17145

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-includes/post-template.php

    r18651 r18712  
    565565        return true;
    566566
    567     if ( $_COOKIE['wp-postpass_' . COOKIEHASH] != $post->post_password )
     567    if ( stripslashes( $_COOKIE['wp-postpass_' . COOKIEHASH] ) != $post->post_password )
    568568        return true;
    569569
Note: See TracChangeset for help on using the changeset viewer.