[wp-trac] [WordPress Trac] #24130: Remove wp_magic_quotes()
WordPress Trac
noreply at wordpress.org
Thu Apr 18 18:55:29 UTC 2013
#24130: Remove wp_magic_quotes()
-----------------------------+--------------------------
Reporter: thanatica2 | Type: defect (bug)
Status: new | Priority: normal
Milestone: Awaiting Review | Component: General
Version: 3.5.1 | Severity: major
Keywords: |
-----------------------------+--------------------------
wp_magic_quotes has no right to exist. Not anymore, anyway.
Magic quotes has been removed from PHP for good reason, and wordpress
appears to be adding magic quotes even for custom non-wordpress code. I
have been pulling my hair out trying to figure out where the hell those
magic quotes where coming from. And now I see no way of preventing
wordpress from adding magic quotes, other than removing whatever wordpress
is adding. Such a waste.
It also creates a $_REQUEST variable, which is also in PHP by default. No
need to re-add it. It may well be slightly different from PHP's default
one, which would make it even worse, because custom code may depend on it.
At the VERY least, only add magic quotes for wordpress-related code and/or
make the standard get_magic_quotes_gpc() somehow return true if you
absolutely must magicquote every byte coming in.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/24130>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list