[wp-trac] Re: [WordPress Trac] #9640: wp_update_user() blindly calls add_magic_quotes(), even on objects

WordPress Trac wp-trac at lists.automattic.com
Wed Apr 29 09:18:25 GMT 2009


#9640: wp_update_user() blindly calls add_magic_quotes(), even on objects
-------------------------------------+--------------------------------------
 Reporter:  misterbisson             |        Owner:          
     Type:  defect (bug)             |       Status:  reopened
 Priority:  normal                   |    Milestone:  2.8     
Component:  Users                    |      Version:  2.8     
 Severity:  normal                   |   Resolution:          
 Keywords:  has-patch needs-testing  |  
-------------------------------------+--------------------------------------

Comment(by Denis-de-Bernardy):

 -1. if arrays get escaped, objects should get escaped as well. plus, it
 feels like we're hiding the issue under the rug.

 I think misterbisson is right: there's a workflow issue in there. it might
 be that objects should get serialized before calling that function, or
 something like that.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/9640#comment:6>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list