[wp-trac] [WordPress Trac] #20356: mw.newPost allows invalid author IDs

WordPress Trac wp-trac at lists.automattic.com
Wed Apr 4 19:01:18 UTC 2012


#20356: mw.newPost allows invalid author IDs
--------------------------+-----------------------------
 Reporter:  maxcutler     |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:
 Severity:  normal        |   Keywords:  has-patch
--------------------------+-----------------------------
 The `metaWeblog.newPost` method does not validate that the supplied
 `wp_author_id` is valid. This allows for invalid `post_author` values on
 posts created or edited by XML-RPC.

 Unit test was added by westi in [UT592].

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/20356>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list