[wp-trac] [WordPress Trac] #10360: $_REQUEST's slashes may differ from $_GET/$_POST
WordPress Trac
wp-trac at lists.automattic.com
Sun Jul 26 12:08:40 UTC 2009
#10360: $_REQUEST's slashes may differ from $_GET/$_POST
--------------------------+-------------------------------------------------
Reporter: dd32 | Owner: ryan
Type: defect (bug) | Status: new
Priority: normal | Milestone: 2.8.3
Component: Security | Version: 2.8
Severity: normal | Keywords: has-patch commit
--------------------------+-------------------------------------------------
Comment(by dd32):
> +1 for removing slashes from _POST and _GET sothat - as dd32 makes bold
My comment was never intended to be taken that way.
I intended that the use of $_POST inside wordpress should be able to be
replaced with $_REQUEST at any stage and operate the same. This infers
that the slashes in REQUEST should be the same as POST. I am not referring
to some non-WP application. '''Simple fact is, WordPress uses/expects
POST/GET data to be slashed, Even though internally data is used unslashed
in recent versions. $_REQUEST is NOT slashed, and therefor, cannot be used
interchangably'''
> Please reference that ticket. Thanks.
Search for it. I'm not your personal search engine.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/10360#comment:31>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list