[wp-trac] [WordPress Trac] #10360: $_REQUEST's slashes may differ from $_GET/$_POST

WordPress Trac wp-trac at lists.automattic.com
Sun Jul 26 12:08:40 UTC 2009


#10360: $_REQUEST's slashes may differ from $_GET/$_POST
--------------------------+-------------------------------------------------
 Reporter:  dd32          |       Owner:  ryan            
     Type:  defect (bug)  |      Status:  new             
 Priority:  normal        |   Milestone:  2.8.3           
Component:  Security      |     Version:  2.8             
 Severity:  normal        |    Keywords:  has-patch commit
--------------------------+-------------------------------------------------

Comment(by dd32):

 > +1 for removing slashes from _POST and _GET sothat - as dd32 makes bold
 My comment was never intended to be taken that way.

 I intended that the use of $_POST inside wordpress should be able to be
 replaced with $_REQUEST at any stage and operate the same. This infers
 that the slashes in REQUEST should be the same as POST. I am not referring
 to some non-WP application. '''Simple fact is, WordPress uses/expects
 POST/GET data to be slashed, Even though internally data is used unslashed
 in recent versions. $_REQUEST is NOT slashed, and therefor, cannot be used
 interchangably'''

 > Please reference that ticket. Thanks.
 Search for it. I'm not your personal search engine.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/10360#comment:31>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list