[wp-trac] [WordPress Trac] #59373: TypeError: str_contains() argument must be of type string, array given in wp-login.php

WordPress Trac noreply at wordpress.org
Sat Sep 16 23:06:41 UTC 2023


#59373: TypeError: str_contains() argument must be of type string, array given in
wp-login.php
------------------------------------+-----------------------------
 Reporter:  TimoTijhof              |      Owner:  (none)
     Type:  defect (bug)            |     Status:  new
 Priority:  normal                  |  Milestone:  Awaiting Review
Component:  Login and Registration  |    Version:  6.3.1
 Severity:  normal                  |   Keywords:
  Focuses:  php-compatibility       |
------------------------------------+-----------------------------
 This seems to affect PHP 8.0 and higher.


 Downstream report at https://github.com/jquery/infrastructure-
 puppet/issues/34

 > Seems to be an upstream issue where a `$_GET` or `$_REQUEST` key is
 checked for existence but not for type, thus prone to misuse when crafting
 query parameters in the array-form that PHP supports.

 Easily reproduced, for example, at:
 * HTTP 500 https://timotijhof.net/wp-login.php?redirect_to[x]=y
 * HTTP 500 https://jquery.com/wp-login.php?redirect_to[x]=y

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/59373>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list