[wp-trac] [WordPress Trac] #59373: TypeError: str_contains() argument must be of type string, array given in wp-login.php
WordPress Trac
noreply at wordpress.org
Sat Sep 16 23:06:41 UTC 2023
#59373: TypeError: str_contains() argument must be of type string, array given in
wp-login.php
------------------------------------+-----------------------------
Reporter: TimoTijhof | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Login and Registration | Version: 6.3.1
Severity: normal | Keywords:
Focuses: php-compatibility |
------------------------------------+-----------------------------
This seems to affect PHP 8.0 and higher.
Downstream report at https://github.com/jquery/infrastructure-
puppet/issues/34
> Seems to be an upstream issue where a `$_GET` or `$_REQUEST` key is
checked for existence but not for type, thus prone to misuse when crafting
query parameters in the array-form that PHP supports.
Easily reproduced, for example, at:
* HTTP 500 https://timotijhof.net/wp-login.php?redirect_to[x]=y
* HTTP 500 https://jquery.com/wp-login.php?redirect_to[x]=y
--
Ticket URL: <https://core.trac.wordpress.org/ticket/59373>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list