[wp-trac] [WordPress Trac] #52178: Allowed memory size exhausted / url creates new post entry?

[WordPress Trac]

#52178: Allowed memory size exhausted / url creates new post entry?
--------------------------+-----------------------------
 Reporter:  sgatz         |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:  5.6
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 We get repeated bots (across multiple WP sites) hitting a specific URL
 pattern, they append a query string onto the end of a wordpress URL like
 this:


 {{{
 https://www.example.com/permalink-to-
 article?q=user%2Fpassword&name%5B%23markup%5D=id&name%5B%23type%5D=markup&name%5B%23post_render%5D%5B%5D=passthru
 }}}


 This causes a memory exhausted error here:
 /wp/wp-includes/post.php at line 773:


 {{{
 } elseif ( is_object( $post ) ) {
                 if ( empty( $post->filter ) ) {
                         $_post = sanitize_post( $post, 'raw' );
                         $_post = new WP_Post( $_post );    ##<--- HERE
                 } elseif ( 'raw' === $post->filter ) {
                         $_post = new WP_Post( $post );
                 } else {
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/52178>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform