there is potential for odd behavior in two queries in ms-edit.php

[Denis-de-Bernardy]

there are two queries in the file that manually insert serialized data in the database:

'a:1:{s:" . strlen( $role ) . ":\"" . $role . "\";b:1;}')"

considering #9663 and the fact that the part of php isn't always mb_string safe, we ought to use the serialize() function instead (or better yet, the API).

[hakre]

Reviewed, patch OK imho, please commit, this should be handeled properly, the earlier, the better.

[wpmuguru]

There will be another one of these in user-edit.php when I merge in the MU code.

[ryan]

(In [12770]) Use API to set the user's role. see #11781

[ryan]

Hacked in a means of using the WP_User::set_role() API. We need a means of setting the blog we want to get the caps for so we can lose the _init_caps() hack. WP_User::for_blog() or the like.

[ryan]

(In [12796]) Introduce WP_User::for_blog() and current_user_can_for_blog() to avoid calls to WP_User::_init_caps(). fixes #11781