[wp-trac] [WordPress Trac] #12280: ^ is an escape char in the windows OS
WordPress Trac
wp-trac at lists.automattic.com
Thu Feb 18 23:56:44 UTC 2010
#12280: ^ is an escape char in the windows OS
--------------------------+-------------------------------------------------
Reporter: hakre | Owner: ryan
Type: defect (bug) | Status: new
Priority: normal | Milestone: 3.0
Component: Security | Version: 3.0
Severity: normal | Keywords: has-patch
--------------------------+-------------------------------------------------
Comment(by miqrogroove):
-1 invalid. Filename escaping is the responsibility of the API, which is
PHP in this case. Tested and confirmed:
{{{copy('index.php', 'inde^^x.php');}}}
PHP creates a file named {{{inde^^x.php}}}, as expected. If there were a
legitimate problem here, it would have created a file named
{{{inde^x.php}}}.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/12280#comment:3>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list