[buddypress-trac] [BuddyPress Trac] #5704: Issue with the backslash character in xprofile admin

buddypress-trac noreply at wordpress.org
Fri Jun 13 09:43:58 UTC 2014

#5704: Issue with the backslash character in xprofile admin
 Reporter:  dontdream     |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  XProfile      |     Version:  2.0
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |

Comment (by imath):

 Replying to [comment:4 DJPaul]:
 > Also interesting to know if this is a regression or not.
 I confirm it's a regression from 1.9. Just checked 1.9.2, and in
 {{{BP_XProfile_Field->render_admin_form_children()}}} the value was
 <input type="text" name="<?php echo esc_attr( $type ); ?>_option[<?php
 echo esc_attr( $j ); ?>]" id="<?php echo esc_attr( $type ); ?>_option<?php
 echo esc_attr( $j ); ?>" value="<?php echo stripslashes( esc_attr(
 $options[$i]->name ) ); ?>" />

 Replying to [comment:3 boonebgorges]:
 > In theory, we should not be saving slashed data in the first place

 Well a filter is available so we can stripslash the array of options
 before saving it to db.
 see 5704.02.patch

Ticket URL: <https://buddypress.trac.wordpress.org/ticket/5704#comment:5>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac

More information about the buddypress-trac mailing list