[wp-trac] [WordPress Trac] #24941: esc_sql in 3.6 changes how /r /n and maybe other characters handled

WordPress Trac noreply at wordpress.org
Sat Aug 3 14:31:25 UTC 2013


#24941: esc_sql in 3.6 changes how /r /n and maybe other characters handled
--------------------------+------------------------------
 Reporter:  sc0ttkclark   |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Formatting    |     Version:  3.6
 Severity:  normal        |  Resolution:
 Keywords:                |
--------------------------+------------------------------

Comment (by sc0ttkclark):

 I think what might be happening here is we were sanitizing certain arrays
 at first, then in certain areas down the line in functions, it would
 unsanitize the data using stripslashes_deep, which with the 3.6 change in
 slashing for \r \n and other characters, means that it will egregiously
 remove those backslashes incorrectly.

 Deeper issue for use to solve, but I think that's the primary issue right
 now.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/24941#comment:12>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list