[wp-trac] Re: [WordPress Trac] #9640: wp_update_user() blindly calls add_magic_quotes(), even on objects

WordPress Trac wp-trac at lists.automattic.com
Wed Apr 29 23:47:48 GMT 2009


#9640: wp_update_user() blindly calls add_magic_quotes(), even on objects
--------------------------+-------------------------------------------------
 Reporter:  misterbisson  |        Owner:          
     Type:  defect (bug)  |       Status:  reopened
 Priority:  normal        |    Milestone:  2.8     
Component:  Users         |      Version:  2.8     
 Severity:  normal        |   Resolution:          
 Keywords:  dev-feedback  |  
--------------------------+-------------------------------------------------

Comment(by hakre):

 well, i would say you are right, but you need to know the circumstances,
 this _is_ the way to got for wordpress code:

 registration.php (as noted above):

 {{{
 // First, get all of the original fields
 $user=get_userdata($ID);

 // Escape data pulled from DB.
 $user=add_magic_quotes(get_object_vars($user));
 }}}

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/9640#comment:11>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list