[buddypress-trac] [BuddyPress Trac] #5704: Issue with the backslash character in xprofile admin
buddypress-trac
noreply at wordpress.org
Fri Jun 13 09:43:58 UTC 2014
#5704: Issue with the backslash character in xprofile admin
--------------------------+------------------------------
Reporter: dontdream | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: XProfile | Version: 2.0
Severity: normal | Resolution:
Keywords: has-patch |
--------------------------+------------------------------
Comment (by imath):
Replying to [comment:4 DJPaul]:
> Also interesting to know if this is a regression or not.
I confirm it's a regression from 1.9. Just checked 1.9.2, and in
{{{BP_XProfile_Field->render_admin_form_children()}}} the value was
stripslashed:
{{{
<input type="text" name="<?php echo esc_attr( $type ); ?>_option[<?php
echo esc_attr( $j ); ?>]" id="<?php echo esc_attr( $type ); ?>_option<?php
echo esc_attr( $j ); ?>" value="<?php echo stripslashes( esc_attr(
$options[$i]->name ) ); ?>" />
}}}
Replying to [comment:3 boonebgorges]:
> In theory, we should not be saving slashed data in the first place
Well a filter is available so we can stripslash the array of options
before saving it to db.
see 5704.02.patch
--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/5704#comment:5>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac
More information about the buddypress-trac
mailing list