[wp-trac] [WordPress Trac] #29696: user_nicename is not being sanitized when updated by wp_update_user()

WordPress Trac noreply at wordpress.org
Thu Oct 2 01:54:30 UTC 2014


#29696: user_nicename is not being sanitized when updated by wp_update_user()
----------------------------------------+---------------------------
 Reporter:  joemcgill                   |       Owner:  boonebgorges
     Type:  defect (bug)                |      Status:  reviewing
 Priority:  normal                      |   Milestone:  4.1
Component:  Users                       |     Version:  trunk
 Severity:  normal                      |  Resolution:
 Keywords:  has-patch needs-unit-tests  |     Focuses:
----------------------------------------+---------------------------

Comment (by joemcgill):

 Thanks for looking at this, Boone. The line in query.php that causes the
 issue is line 2784:
 https://core.trac.wordpress.org/browser/trunk/src/wp-
 includes/query.php#L2784

 {{{
 $q['author_name'] = sanitize_title_for_query( $q['author_name'] );
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29696#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list