[wp-trac] [WordPress Trac] #41944: Add %u support to wpdb->prepare

WordPress Trac noreply at wordpress.org
Thu Sep 21 14:21:06 UTC 2017


#41944: Add %u support to wpdb->prepare
--------------------------+------------------------------
 Reporter:  charlestonsw  |       Owner:
     Type:  enhancement   |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Database      |     Version:  4.8.2
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------

Comment (by soulseekah):

 Replying to [comment:3 charlestonsw]:

 > Apparently this is a non-issue other than the fact that  WP 4.8.2 broke
 a lot of code that used %u instead of %d while gaining no advantage with
 regard to the original security concerns the patch was meant to address.
 >
 > After all active plugins replace any %u referenced with %d this will be
 a non-issue but maybe it should be considered to keep those handful of
 plugins that are using it from breaking because someone updates WP to
 version 4.8.2+.

 Oh, I see. So you had code that actually used %u?

 Well I'm being met with a lot of hurdles after requesting numbered
 placeholders https://core.trac.wordpress.org/ticket/41925

 So you're seem to be in the same boat. But if you can show that a lot of
 code used %u out there (because a lot of code used numbered placeholders)
 you might be able to push for %u coming back for back-compatibility
 reasons. It's simpler than numbered placeholders, but yes.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/41944#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list