[wp-trac] [WordPress Trac] #41944: Add %u support to wpdb->prepare

WordPress Trac noreply at wordpress.org
Thu Sep 21 14:17:30 UTC 2017


#41944: Add %u support to wpdb->prepare
--------------------------+------------------------------
 Reporter:  charlestonsw  |       Owner:
     Type:  enhancement   |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Database      |     Version:  4.8.2
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------

Comment (by charlestonsw):

 {{{
 sprintf( 'Unsigned %u Signed %d <br/>' , PHP_INT_MAX , PHP_INT_MAX )
 }}}

 Unsigned 9223372036854775807 Signed 9223372036854775807

 Apparently this is a non-issue other than the fact that  WP 4.8.2 broke a
 lot of code that used %u instead of %d while gaining no advantage with
 regard to the original security concerns the patch was meant to address.

 After all active plugins replace any %u referenced with %d this will be a
 non-issue but maybe it should be considered to keep those handful of
 plugins that are using it from breaking because someone updates WP to
 version 4.8.2+.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/41944#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list