Changeset 43740 for branches/5.0/src/wp-includes/rest-api/fields/class-wp-rest-meta-fields.php

Timestamp:

10/17/2018 08:09:33 PM (8 years ago)

Author:

kadamwhite

Message:

REST API: Slash existing meta values when comparing with incoming meta upates.

When comparing the old and new values for a meta key being set, ensure both values are sanitized using the same logic so that equal values match.

props boonebgorges, dcavins, MattGeri, pilou69, TimothyBlynJacobs.
Fixes #42069.

File:

• branches/5.0/src/wp-includes/rest-api/fields/class-wp-rest-meta-fields.php (modified) (1 diff)

branches/5.0/src/wp-includes/rest-api/fields/class-wp-rest-meta-fields.php

@@ -296 +296 @@
                 }
 
-                $meta_key   = wp_slash( $meta_key );
-                $meta_value = wp_slash( $value );
-
                 // Do the exact same check for a duplicate value as in update_metadata() to avoid update_metadata() returning false.
                 $old_value = get_metadata( $meta_type, $object_id, $meta_key );
+                $subtype   = get_object_subtype( $meta_type, $object_id );
 
                 if ( 1 === count( $old_value ) ) {
-                        if ( $old_value[0] === $meta_value ) {
+                        if ( (string) sanitize_meta( $meta_key, $value, $meta_type, $subtype ) === $old_value[0] ) {
                                 return true;
                         }
                 }
 
-                if ( ! update_metadata( $meta_type, $object_id, $meta_key, $meta_value ) ) {
+                if ( ! update_metadata( $meta_type, $object_id, wp_slash( $meta_key ), wp_slash( $value ) ) ) {
                         return new WP_Error(
                                 'rest_meta_database_error',