WordPress.org

Make WordPress Core

Opened 8 years ago

Closed 8 years ago

Last modified 8 years ago

#4087 closed defect (bug) (invalid)

wp-pass.php double stripslashes() input

Reported by: rob1n Owned by: rob1n
Milestone: Priority: normal
Severity: normal Version: 2.2
Component: General Keywords:
Focuses: Cc:

Description

wp-pass.php require()'s wp-config.php, which in turn requires wp-settings.php, which goes through and stripslashes_deep() the GPC variables if magic_quotes_gpc is on.

Yet, wp-pass.php does this over again.

Attachments (1)

4087.diff (502 bytes) - added by rob1n 8 years ago.

Download all attachments as: .zip

Change History (6)

@rob1n8 years ago

comment:1 @rob1n8 years ago

Not committing it yet, as I just want to clarify.

comment:2 @rob1n8 years ago

  • Cc rob1n added

comment:3 @rob1n8 years ago

  • Cc rboren rob1n removed
  • Keywords has-patch 2nd-opinion removed
  • Resolution set to invalid
  • Status changed from new to closed

comment:4 @rob1n8 years ago

Apparently we do some WEIRD escaping techniques. And it all works, apparently O_o

comment:5 @Nazgul8 years ago

  • Milestone 2.2 deleted
Note: See TracTickets for help on using tickets.