Make WordPress Core

Opened 11 years ago

Closed 11 years ago

Last modified 11 years ago

#4087 closed defect (bug) (invalid)

wp-pass.php double stripslashes() input

Reported by: rob1n Owned by: rob1n
Milestone: Priority: normal
Severity: normal Version: 2.2
Component: General Keywords:
Focuses: Cc:


wp-pass.php require()'s wp-config.php, which in turn requires wp-settings.php, which goes through and stripslashes_deep() the GPC variables if magic_quotes_gpc is on.

Yet, wp-pass.php does this over again.

Attachments (1)

4087.diff (502 bytes) - added by rob1n 11 years ago.

Download all attachments as: .zip

Change History (6)

11 years ago

#1 @rob1n
11 years ago

Not committing it yet, as I just want to clarify.

#2 @rob1n
11 years ago

  • Cc rob1n added

#3 @rob1n
11 years ago

  • Cc rboren rob1n removed
  • Keywords has-patch 2nd-opinion removed
  • Resolution set to invalid
  • Status changed from new to closed

#4 @rob1n
11 years ago

Apparently we do some WEIRD escaping techniques. And it all works, apparently O_o

#5 @Nazgul
11 years ago

  • Milestone 2.2 deleted
Note: See TracTickets for help on using tickets.