[wp-trac] [WordPress Trac] #24130: Remove wp_magic_quotes()

WordPress Trac noreply at wordpress.org
Thu Apr 18 18:55:29 UTC 2013


#24130: Remove wp_magic_quotes()
-----------------------------+--------------------------
 Reporter:  thanatica2       |       Type:  defect (bug)
   Status:  new              |   Priority:  normal
Milestone:  Awaiting Review  |  Component:  General
  Version:  3.5.1            |   Severity:  major
 Keywords:                   |
-----------------------------+--------------------------
 wp_magic_quotes has no right to exist. Not anymore, anyway.

 Magic quotes has been removed from PHP for good reason, and wordpress
 appears to be adding magic quotes even for custom non-wordpress code. I
 have been pulling my hair out trying to figure out where the hell those
 magic quotes where coming from. And now I see no way of preventing
 wordpress from adding magic quotes, other than removing whatever wordpress
 is adding. Such a waste.

 It also creates a $_REQUEST variable, which is also in PHP by default. No
 need to re-add it. It may well be slightly different from PHP's default
 one, which would make it even worse, because custom code may depend on it.

 At the VERY least, only add magic quotes for wordpress-related code and/or
 make the standard get_magic_quotes_gpc() somehow return true if you
 absolutely must magicquote every byte coming in.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/24130>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list