[wp-trac] [WordPress Trac] #20356: mw.newPost allows invalid author IDs
WordPress Trac
wp-trac at lists.automattic.com
Wed Apr 4 19:01:18 UTC 2012
#20356: mw.newPost allows invalid author IDs
--------------------------+-----------------------------
Reporter: maxcutler | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: General | Version:
Severity: normal | Keywords: has-patch
--------------------------+-----------------------------
The `metaWeblog.newPost` method does not validate that the supplied
`wp_author_id` is valid. This allows for invalid `post_author` values on
posts created or edited by XML-RPC.
Unit test was added by westi in [UT592].
--
Ticket URL: <http://core.trac.wordpress.org/ticket/20356>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list