wp-pass.php double stripslashes() input
|Reported by:||rob1n||Owned by:||rob1n|
wp-pass.php require()'s wp-config.php, which in turn requires wp-settings.php, which goes through and stripslashes_deep() the GPC variables if magic_quotes_gpc is on.
Yet, wp-pass.php does this over again.
Change History (6)
Note: See TracTickets for help on using tickets.