WordPress.org

Make WordPress Core

Opened 12 years ago

Closed 12 years ago

#7768 closed defect (bug) (fixed)

Post meta escaped incorrectly

Reported by: DD32 Owned by:
Milestone: 2.7 Priority: normal
Severity: normal Version: 2.6.1
Component: General Keywords: has-patch commit
Focuses: Cc:

Description

As raised by Rick Beckman on wp-hackers, " and ' are double escaped upon adding post meta.

wpdb::escape() is being called on the metadata twice. See the attached patch

Attachments (1)

7768.diff (2.3 KB) - added by DD32 12 years ago.

Download all attachments as: .zip

Change History (4)

@DD32
12 years ago

#1 @KingdomGeek
12 years ago

Thanks for getting this added so quickly, DD32!

I applied this patch to my 2.6.2 installation, and it works perfectly.

#2 @DD32
12 years ago

  • Keywords commit added

#3 @azaozz
12 years ago

  • Resolution set to fixed
  • Status changed from new to closed

(In [9116]) Fix escaping of post meta, props DD32, fixes #7768

Note: See TracTickets for help on using tickets.