[wp-trac] [WordPress Trac] #12402: make addslashes_gpc() use addslashes() fix to use real_escape, rather than addslashes
WordPress Trac
wp-trac at lists.automattic.com
Sat Feb 27 02:56:51 UTC 2010
#12402: make addslashes_gpc() use addslashes() fix to use real_escape, rather than
addslashes
-------------------------------+--------------------------------------------
Reporter: Denis-de-Bernardy | Owner: ryan
Type: defect (bug) | Status: new
Priority: normal | Milestone: 3.0
Component: Security | Version: 3.0
Severity: normal | Keywords: has-patch needs-testing
-------------------------------+--------------------------------------------
Comment(by miqrogroove):
I'll give this +1 if the patch makes esc_sql() deprecated or aliases
weak_escape instead of magic_quotes. Otherwise, that can of worms is
looking rather large.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/12402#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list