[wp-trac] [WordPress Trac] #43056: Notice in redirect_guess_404_permalink() when post type is an array

WordPress Trac noreply at wordpress.org
Mon Jan 14 22:35:26 UTC 2019


#43056: Notice in redirect_guess_404_permalink() when post type is an array
-------------------------------------+-----------------------------
 Reporter:  junaidbhura              |       Owner:  (none)
     Type:  defect (bug)             |      Status:  new
 Priority:  normal                   |   Milestone:  Future Release
Component:  Canonical                |     Version:
 Severity:  normal                   |  Resolution:
 Keywords:  has-patch needs-refresh  |     Focuses:
-------------------------------------+-----------------------------
Changes (by pento):

 * keywords:  has-patch => has-patch needs-refresh
 * version:  trunk =>
 * milestone:  5.1 => Future Release


Comment:

 I suspect [attachment:"43056.diff"] will introduce SQL injection issues.
 `wpdb:prepare()` won't put quotes around each element of the array being
 sent to it when replacing into the `%s`.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/43056#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list