[wp-trac] [WordPress Trac] #10360: $_REQUEST's slashes may differ from $_GEt/$_POSt

WordPress Trac wp-trac at lists.automattic.com
Wed Jul 8 09:25:57 UTC 2009


#10360: $_REQUEST's slashes may differ from $_GEt/$_POSt
----------------------------+-----------------------------------------------
 Reporter:  dd32            |       Owner:                          
     Type:  defect (bug)    |      Status:  new                     
 Priority:  normal          |   Milestone:  2.9                     
Component:  Administration  |     Version:  2.9                     
 Severity:  normal          |    Keywords:  needs-patch dev-feedback
----------------------------+-----------------------------------------------
 $_REQUEST is re-created from $_GET/$_POST on line 51 of wp-settings.php

 However, $_GET/$_POST/$_COOKIE are slashed ~ line 580, The end result is
 that {{{$_POST['test']}}} may not equal {{{$_REQUEST['test']}}} depending
 on the server setup, and content of such globals.

 My suggestion would be to move both code blocks from where they currently
 are, and place them in about line 260. (Or alternativly, Just add
 $_REQUEST to the deslash/addslash code block..)

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/10360>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list