Changeset 37581

Timestamp:

05/27/2016 01:53:09 AM (8 years ago)

Author:

pento

Message:

Setup: Sanity check for invalid table prefixes.

There are some table prefixes (for example, 7e1_), which MySQL will try and parse as values when they're note quoted in backticks. Because not everything remembers to quote their table names, it's best if we just discourage their use during setup.

Fixes #36422.

File:

• trunk/src/wp-admin/setup-config.php (modified) (1 diff)

trunk/src/wp-admin/setup-config.php

@@ -279 +279 @@
         wp_die( $wpdb->error->get_error_message() . $tryagain_link );
 
+    $wpdb->query( "SELECT $prefix" );
+    if ( ! $wpdb->last_error ) {
+        // MySQL was able to parse the prefix as a value, which we don't want. Bail.
+        wp_die( __( '<strong>ERROR</strong>: "Table Prefix" is invalid.' ) );
+    }
+
     // Generate keys and salts using secure CSPRNG; fallback to API if enabled; further fallback to original wp_generate_password().
     try {