Ticket #6640 (closed defect: fixed)

Opened 8 months ago

Last modified 8 months ago

Login should use DB prepare method on user input

Reported by: filosofo Assigned to: anonymous
Priority: normal Milestone: 2.5.1
Component: General Version:
Severity: normal Keywords: wp-login wpdb prepare mysql has-patch
Cc: filosofo

Description

I noticed that wp-login.php runs DB queries from user-inputted data that is sanitized in an ad hoc manner. If for no other reason than consistency, it seems to me that all such queries should use the prepare method, as this patch does.

Attachments

prepare_login_queries.diff (1.5 kB) - added by filosofo on 04/08/08 15:51:50.

Change History

04/08/08 15:51:50 changed by filosofo

  • attachment prepare_login_queries.diff added.

04/08/08 17:29:40 changed by ryan

  • status changed from new to closed.
  • resolution set to fixed.

(In [7632]) Use DB prepare on login queries. Props filosofo. fixes #6640 for 2.5

04/08/08 17:30:16 changed by ryan

(In [7633]) Use DB prepare on login queries. Props filosofo. fixes #6640 for trunk

04/08/08 17:30:39 changed by ryan

  • milestone changed from 2.6 to 2.5.1.