[wp-trac] [WordPress Trac] #12402: make addslashes_gpc() use addslashes() fix to use real_escape, rather than addslashes

WordPress Trac wp-trac at lists.automattic.com
Sat Feb 27 15:47:04 UTC 2010


#12402: make addslashes_gpc() use addslashes() fix to use real_escape, rather than
addslashes
-------------------------------+--------------------------------------------
 Reporter:  Denis-de-Bernardy  |       Owner:  ryan                   
     Type:  defect (bug)       |      Status:  new                    
 Priority:  normal             |   Milestone:  3.0                    
Component:  Security           |     Version:  3.0                    
 Severity:  normal             |    Keywords:  has-patch needs-testing
-------------------------------+--------------------------------------------

Comment(by Denis-de-Bernardy):

 actually... nevermind... you're right. add_magic_quotes() only accepts an
 array, while esc_sql accepts anything.

 I'd like to see some dev feedback before updating the patch, though...

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/12402#comment:6>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list