[wp-trac] [WordPress Trac] #32063: XML-RPC API doesn't allow password containing single quote

[WordPress Trac]

#32063: XML-RPC API doesn't allow password containing single quote
-------------------------------+------------------------------
 Reporter:  reprotector        |       Owner:  markoheijnen
     Type:  defect (bug)       |      Status:  assigned
 Priority:  normal             |   Milestone:  Awaiting Review
Component:  XML-RPC            |     Version:  2.6
 Severity:  normal             |  Resolution:
 Keywords:  reporter-feedback  |     Focuses:
-------------------------------+------------------------------
Changes (by dd32):

 * keywords:  needs-testing => reporter-feedback


Comment:

 This is working for me on a self-hosted site. Neither of the examples
 below (using either wp.getOptions or wp.getPosts) work on WordPress.com
 though, which I assume is a WordPress.com-specific authentication bug.

 Two tests with the password `abc"123'456`:
 {{{
 curl --header "Accept: text/xml;" --data "<?xml
 version="1.0"?><methodCall><methodName>wp.getOptions</methodName><params><param><value><string></string></value></param><param><value><string>admin</string></value></param><param><value><string>abc\"123'456</string></value></param></params></methodCall>"
 http://localhost/wordpress-develop/src/xmlrpc.php
 }}}
 {{{
 <?php
 include ABSPATH . WPINC . '/class-IXR.php';
 $rpc = new IXR_Client( "http://localhost/wordpress-develop/src/xmlrpc.php"
 );
 $rpc->query('wp.getOptions', 0, 'admin', 'abc"123\'456' );
 var_dump( $rpc );
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/32063#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform