Make WordPress Core

Opened 8 years ago

Last modified 8 years ago

#44510 new defect (bug)

count_user_posts() does not check for empty $userid

Reported by: Ste_95 Owned by:
Priority: normal Milestone: Awaiting Review
Component: Users Version:
Severity: normal Keywords: has-patch
Cc: Focuses:

Description

If count_user_posts() is called with a NULL $userid, it will return the total count of all site posts, rather than 0 or some error.

I think this should not be expected behavior and we should bail early if $userid is NULL. This happens because get_posts_by_author_sql() then ignores the $userid arg if it is NULL.

https://core.trac.wordpress.org/browser/tags/4.9.6/src/wp-includes/user.php#L347

Attachments (3)

user.diff​ (120.2 KB ) - added by krynes 8 years ago.
I think this is solution
user.2.diff​ (533 bytes ) - added by krynes 8 years ago.
I think this is solution
44510.diff​ (487 bytes ) - added by krynes 8 years ago.
This is solution, the best option

Download all attachments as: .zip

Change History (6)

@krynes
8 years ago

I think this is solution

@krynes
8 years ago

I think this is solution

#1 @krynes
8 years ago

  • Keywords has-patch added

@krynes
8 years ago

This is solution, the best option

#2 @Ste_95
8 years ago

I don't think we should check for is_user_logged_in(), since get_posts_by_author_sql() doesn't change its behavior in case the user is logged in.

#3 @Ste_95
8 years ago

Last edited 8 years ago by Ste_95 (previous) (diff)
Note: See TracTickets for help on using tickets.