[wp-trac] [WordPress Trac] #41925: Bring back, support and document %1$s support in wpdb->prepare

WordPress Trac noreply at wordpress.org
Wed Sep 20 19:35:10 UTC 2017


#41925: Bring back, support and document %1$s support in wpdb->prepare
-------------------------+----------------------
 Reporter:  soulseekah   |       Owner:
     Type:  enhancement  |      Status:  closed
 Priority:  normal       |   Milestone:
Component:  Database     |     Version:
 Severity:  normal       |  Resolution:  wontfix
 Keywords:               |     Focuses:
-------------------------+----------------------

Comment (by pbiron):

 I'd note that the way the vulnerability was closed also rules out args
 like `%.6f` in addition to `%1$s`, which broke
 [[https://wordpress.org/plugins/wordfence/#developers|WordFence]] (see the
 change log entry for 6.3.19).

--
Ticket URL: <https://core.trac.wordpress.org/ticket/41925#comment:14>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list