[wp-trac] [WordPress Trac] #56311: Week query variable is not being sanitized correctly

WordPress Trac noreply at wordpress.org
Thu Aug 11 02:53:24 UTC 2022


#56311: Week query variable is not being sanitized correctly
---------------------------+------------------------------
 Reporter:  domainsupport  |       Owner:  audrasjb
     Type:  defect (bug)   |      Status:  assigned
 Priority:  normal         |   Milestone:  Awaiting Review
Component:  Query          |     Version:
 Severity:  normal         |  Resolution:
 Keywords:                 |     Focuses:
---------------------------+------------------------------

Comment (by xParham):

 I wanted to add that the same issue exists for the `day` parameter and
 perhaps for the other date parameters. Just recently, we have found a bot
 requesting some random URLs with parameters like
 `?type=day&day=2021-02-09`, causing a lot of noise in the logs: `Function
 WP_Date_Query was called <strong>incorrectly</strong>. Invalid value
 <code>2021</code> for <code>day</code>.`

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/56311#comment:9>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list