Changeset 35639

Timestamp:

11/15/2015 10:59:51 PM (9 years ago)

Author:

johnbillion

Message:

On servers running PHP <= 5.4 which have magic_quotes_sybase enabled, the superglobals need to be magic-quoted before magic_quotes_sybase is subsequently disabled to avoid incorrect un-slashing. This must surely effect a miniscule number of servers, but so be it.

Fixes #19455
Props summerblue, kurtpayne, lucatume

Location:

trunk

Files:

• src/wp-includes/load.php (modified) (1 diff)
• src/wp-settings.php (modified) (1 diff)
• tests/phpunit/tests/load.php (added)

trunk/src/wp-includes/load.php

@@ -604 +604 @@
     }
 
+    // Turn off sybase quoting after stripslashes has run
+    @ini_set( 'magic_quotes_sybase', 0 );
+
     // Escape with wpdb.
     $_GET    = add_magic_quotes( $_GET    );

trunk/src/wp-settings.php

@@ -47 +47 @@
 // Disable magic quotes at runtime. Magic quotes are added using wpdb later in wp-settings.php.
 @ini_set( 'magic_quotes_runtime', 0 );
-@ini_set( 'magic_quotes_sybase',  0 );
 
 // WordPress calculates offsets from UTC.