Changeset 48205

Timestamp:

06/28/2020 09:02:18 PM (4 years ago)

Author:

SergeyBiryukov

Message:

Bootstrap/Load: Make sure add_magic_quotes() does not inappropriately recast non-string data types to string.

Props donmhico, jrf, Veraxus, Rarst.
Fixes #48605.

Location:

trunk

Files:

• src/wp-includes/functions.php (modified) (2 diffs)
• tests/phpunit/tests/functions/addMagicQuotes.php (added)

trunk/src/wp-includes/functions.php

@@ -1220 +1220 @@
  *
  * @since 0.71
+ * @since 5.5.0 Non-string values are left untouched.
  *
  * @param array $array Array to walk while sanitizing contents.
@@ -1228 +1229 @@
         if ( is_array( $v ) ) {
             $array[ $k ] = add_magic_quotes( $v );
+        } elseif ( ! is_string( $v ) ) {
+            continue;
         } else {
             $array[ $k ] = addslashes( $v );
         }
     }
+
     return $array;
 }