[wp-trac] [WordPress Trac] #32063: XML-RPC API doesn't allow password containing single quote

WordPress Trac noreply at wordpress.org
Fri Apr 24 15:11:02 UTC 2015


#32063: XML-RPC API doesn't allow password containing single quote
---------------------------+------------------------------
 Reporter:  reprotector    |       Owner:  markoheijnen
     Type:  defect (bug)   |      Status:  assigned
 Priority:  normal         |   Milestone:  Awaiting Review
Component:  XML-RPC        |     Version:  2.6
 Severity:  normal         |  Resolution:
 Keywords:  needs-testing  |     Focuses:
---------------------------+------------------------------

Comment (by redsweater):

 Interesting @reprotector. Sounds like it will be a real puzzle to figure
 out! I wonder if somehow the username has something to do with it, too?

 Looking at the API code in WordPress, it doesn't seem like the login
 process for wp.getOptions is much different than for other methods. It's
 hard to imagine how it would vary.

 Is it possible you've only seen the bug happening on the command line with
 "curl"? Maybe your shell is handling the quoted string differently than
 mine? I noticed one thing that seemed a little odd was the use of " quotes
 inside " quotes, without escaping them.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/32063#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list