[wp-trac] Re: [WordPress Trac] #4553: Consider using local prepared-statement/sprintf()-like system for last-second SQL escaping

WordPress Trac wp-trac at lists.automattic.com
Thu Mar 27 18:14:30 GMT 2008


#4553: Consider using local prepared-statement/sprintf()-like system for last-
second SQL escaping
---------------------------------------------------------------------+------
 Reporter:  markjaquith                                              |        Owner:  markjaquith
     Type:  task                                                     |       Status:  closed     
 Priority:  high                                                     |    Milestone:  2.5        
Component:  Security                                                 |      Version:  2.3        
 Severity:  normal                                                   |   Resolution:  fixed      
 Keywords:  sql prepared statement sprintf injection security early  |  
---------------------------------------------------------------------+------
Changes (by Nazgul):

  * status:  assigned => closed
  * resolution:  => fixed

Comment:

 Closing as fixed for now for the 2.5 release, as Lloyd suggests.

 The remaining work can be done in a new ticket for 2.6

-- 
Ticket URL: <http://trac.wordpress.org/ticket/4553#comment:22>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list