WordPress.org
Get WordPress

Make WordPress Core

Opened 19 years ago

Closed 19 years ago

Last modified 19 years ago

#4087 closed defect (bug) (invalid)

wp-pass.php double stripslashes() input

Reported by: rob1n Owned by: rob1n
Priority: normal Milestone:
Component: General Version: 2.2
Severity: normal Keywords:
Cc: Focuses:

Description

wp-pass.php require()'s wp-config.php, which in turn requires wp-settings.php, which goes through and stripslashes_deep() the GPC variables if magic_quotes_gpc is on.

Yet, wp-pass.php does this over again.

Attachments (1)

4087.diff​ (502 bytes ) - added by rob1n 19 years ago.

Download all attachments as: .zip

Change History (6)

@rob1n
19 years ago

#1 @rob1n
19 years ago

Not committing it yet, as I just want to clarify.

#2 @rob1n
19 years ago

  • Cc rob1n added

#3 @rob1n
19 years ago

  • Cc rboren rob1n removed
  • Keywords has-patch 2nd-opinion removed
  • Resolution → invalid
  • Status new → closed

#4 @rob1n
19 years ago

Apparently we do some WEIRD escaping techniques. And it all works, apparently O_o

#5 @Nazgul
19 years ago

  • Milestone 2.2
Note: See TracTickets for help on using tickets.