Make WordPress Core

Opened 16 years ago

Closed 15 years ago

#14516 closed defect (bug) (duplicate)

Must stripslash input fields for db install

Reported by: johanee Owned by:
Priority: normal Milestone:
Component: Upgrade/Install Version: 3.0.1
Severity: normal Keywords: has-patch
Cc: Focuses:

Description

During WordPress database install we must stripslash the input fields.

For database name, database username and database password \, ', and " are valid characters. For dbhost "strange" characters probably aren't valid, but we should handle it correctly anyway.

For prefix there is no need to stripslash as we immediately make sure it only contains letters, numbers and underscores. (mysql allows other characters, but it is probably wise to limit it anyway).

Attachments (2)

stripslashes-db-values-on-install.patch​ (661 bytes ) - added by johanee 16 years ago.
Stripslash input during db install
stripslashes-db-values-on-install-2.patch​ (1.7 KB ) - added by johanee 16 years ago.
Stripslash input during db install and addslashes when saving config

Download all attachments as: .zip

Change History (10)

@johanee
16 years ago

Stripslash input during db install

#1 @johanee
16 years ago

  • Cc johan.eenfeldt@… added

Please wait.

Obviously we must then addslashes() when saving to wp-config.php. Updating and actually testing patch!

@johanee
16 years ago

Stripslash input during db install and addslashes when saving config

#2 @nacin
16 years ago

  • Milestone Awaiting Review → 3.1

#3 @nacin
16 years ago

Related, potentially for 3.1 as well: #14516

#4 follow-up: @johanee
16 years ago

This is #14516 did you mean #13655 ?

#5 in reply to: ↑ 4 @nacin
16 years ago

Replying to johanee:

This is #14516 did you mean #13655 ?

Yep, thanks.

#6 @johanee
16 years ago

  • Keywords has-patch added

#7 @ryan
16 years ago

  • Milestone 3.1 → Future Release

#8 @SergeyBiryukov
15 years ago

  • Milestone Future Release
  • Resolution → duplicate
  • Status new → closed
Note: See TracTickets for help on using tickets.