[wp-trac] [WordPress Trac] #15220: Post custom fields and metakey starting with _

WordPress Trac wp-trac at lists.automattic.com
Wed Oct 27 01:59:19 UTC 2010


#15220: Post custom fields and metakey starting with _
----------------------------+-----------------------------------------------
 Reporter:  arena           |       Owner:                 
     Type:  defect (bug)    |      Status:  new            
 Priority:  normal          |   Milestone:  Awaiting Review
Component:  Administration  |     Version:  3.1            
 Severity:  normal          |    Keywords:  needs-patch    
----------------------------+-----------------------------------------------
Changes (by scribu):

  * keywords:  reporter-feedback => needs-patch
  * component:  General => Administration


Comment:

 Now I get it.

 Hidden custom fields = non-public custom fields.

 Just like we don't allow users to create non-public post types from the
 UI, we shouldn't allow creation of non-public custom fields either.

 For example, a sneaky user could cause trouble by setting a custom field
 he's not supposed to set.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/15220#comment:5>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list