[wp-trac] [WordPress Trac] #14323: Quick Edit stores filtering of title to database

WordPress Trac wp-trac at lists.automattic.com
Thu Jul 15 20:07:00 UTC 2010


#14323: Quick Edit stores filtering of title to database
-----------------------------+----------------------------------------------
 Reporter:  kingjeffrey      |       Owner:                       
     Type:  defect (bug)     |      Status:  new                  
 Priority:  normal           |   Milestone:  Awaiting Review      
Component:  Quick/Bulk Edit  |     Version:  3.0                  
 Severity:  blocker          |    Keywords:  destructive filtering
-----------------------------+----------------------------------------------
 line 1188 of `/wp-admin/includes/template.php` consists of this line:

 `$title = esc_attr( get_the_title( $post->ID ) );`

 `$title` is later stored to the title text field in the quick edit form
 for posts.

 The problem with this structure is that any filtering done by plugins on
 the `the_title` hook  is saved to the database via the quick edit form –
 creating destructive change that is not reversed when the plugin is
 deactivated.

 Please consider using `the_title_attribute` or a direct db call so that
 the `the_title` hook is not called.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/14323>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list