WordPress.org

Make WordPress Core

Opened 5 years ago

Closed 2 weeks ago

Last modified 2 weeks ago

#10850 closed feature request (wontfix)

Make register_setting available on the front-end

Reported by: neoxx Owned by: ryan
Milestone: Priority: normal
Severity: normal Version: 2.8.4
Component: Security Keywords:
Focuses: Cc:

Description

hi,

since 2.7.0 we have the function register_setting($option_group, $option_name, $sanitize_callback = '') in /wp-admin/plugin.php to securely handle handed over $_POST variables in the admin menu.

afaik, besides of the usage of query_vars (which only work for $_GET variables) we have no counterpart to register_setting on the front-end. imho, we could increase the security and usability of forms and their variables if we would provide a similar functionality in wp-includes.

what do you think?

greetz,
berny

Change History (3)

comment:1 avryl8 months ago

  • Keywords dev-feedback added; register_setting query_vars $_POST $_GET removed

comment:2 ericlewis2 weeks ago

  • Keywords dev-feedback removed
  • Resolution set to wontfix
  • Status changed from new to closed

essentially, this is a feature request for forms on the front-end.

i'd say that's plugin territory for the moment. also considering this ticket has also garnered no support for 5 years, i'm resolving this as wontfix.

comment:3 helen2 weeks ago

  • Milestone Future Release deleted
Note: See TracTickets for help on using tickets.