Ticket #5901 (closed defect: fixed)

Opened 5 months ago

Last modified 5 months ago

Inconsistent user option name sanitization

Reported by: filosofo Assigned to: anonymous
Priority: normal Milestone: 2.5
Component: General Version: 2.5
Severity: normal Keywords: update_user_option get_user_option has-patch sanitization
Cc: filosofo

Description

update_user_option sanitizes the option name, because it sends the option to update_usermeta which does the sanitizing. However, get_user_option doesn't sanitize the option name before checking whether the option is among the userdata. So, if your option name has non-kosher characters, you'll never be able to retrieve it using get_user_option.

The attached patch sanitizes the option in get_user_option.

Attachments

get_user_option-sanitization.diff (382 bytes) - added by filosofo on 02/18/08 18:19:41.

Change History

02/18/08 18:19:41 changed by filosofo

  • attachment get_user_option-sanitization.diff added.

02/18/08 20:16:02 changed by ryan

  • status changed from new to closed.
  • resolution set to fixed.

(In [6902]) Make user option name sanitization consistent. Props filosofo. fixes #5901