[wp-trac] [WordPress Trac] #21767: Remove stripslashes from API functions
WordPress Trac
noreply at wordpress.org
Wed Feb 6 19:09:01 UTC 2013
#21767: Remove stripslashes from API functions
-------------------------------------------------+-------------------------
Reporter: alexkingorg | Owner:
Type: task (blessed) | Status: new
Priority: normal | Milestone: 3.6
Component: Formatting | Version: 3.4
Severity: normal | Resolution:
Keywords: has-patch needs-testing needs-unit- |
tests 3.6-early |
-------------------------------------------------+-------------------------
Comment (by ryan):
While we're about this we will need to audit all wpdb calls to make sure
the queries are properly prepare()d. esc_sql() and $wdb->escape() should
not be used in core code making queries. They are both weak.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/21767#comment:50>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list