Make WordPress Core

Opened 19 years ago

Closed 19 years ago

Last modified 18 years ago

#1541 closed defect (bug) (fixed)

Pingback source URIs are no longer checked for a valid link (!!!)

Reported by: markjaquith's profile markjaquith Owned by: markjaquith's profile markjaquith
Milestone: Priority: highest omg bbq
Severity: critical Version: 1.6
Component: Administration Keywords: bg|has-patch bg|commit
Focuses: Cc:

Description

In both 1.6 SVN and /branches/1.5/, pingback "from" URIs are no longer checked to see if they have a valid link!

This change happened when Denis' improved excerpt code was inserted. The old code was taken out... including the part that verifies that the link exists.

This definitely needs to get fixed before a 1.5.1.4 release is made from the 1.5 code branch, or Pingback will suddenly be as wide open as Trackback to spammers. How do you think I discovered this bug? ;-)

Attachments (2)

xmlrpc.php_1.5-branch.diff (531 bytes) - added by markjaquith 19 years ago.
Patch for 1.5 branch
xmlrpc.php_1.6-svn.diff (528 bytes) - added by markjaquith 19 years ago.
Patch for 1.6 SVN

Download all attachments as: .zip

Change History (10)

#1 @markjaquith
19 years ago

  • Status changed from new to assigned

#2 @markjaquith
19 years ago

  • Milestone changed from 2.0 to 1.6

@markjaquith
19 years ago

Patch for 1.5 branch

@markjaquith
19 years ago

Patch for 1.6 SVN

#3 @markjaquith
19 years ago

  • Keywords bg|has-patch bg|commit added; bg|dev-feedback bg|needs-patch removed

#4 @markjaquith
19 years ago

  • Summary changed from Pingback URIs are no longer validated (!!) to Pingback source URIs are no longer checked for a valid link (!!!)

#5 @matt
19 years ago

  • Resolution set to fixed
  • Status changed from assigned to closed

(In [2742]) Fixes #1541

#6 @markjaquith
19 years ago

  • Milestone changed from 1.6 to 1.5.2
  • Resolution fixed deleted
  • Status changed from closed to reopened

Okay, fixed for 1.6, but we still need this in /branches/1.5/ for that 1.5.2 release.

#7 @matt
19 years ago

  • Resolution set to fixed
  • Status changed from reopened to closed

(In [2778]) Re fixes #1541

#8 @(none)
18 years ago

  • Milestone 1.5.2 deleted

Milestone 1.5.2 deleted

Note: See TracTickets for help on using tickets.