On servers running PHP <= 5.4 which have `magic_quotes_sybase` enabled, the superglobals need to be magic-quoted before `magic_quotes_sybase` is subsequently disabled to avoid incorrect un-slashing. This must surely effect a miniscule number of servers, but so be it.

Fixes #19455
Props summerblue, kurtpayne, lucatume

Built from https://develop.svn.wordpress.org/trunk@35639


git-svn-id: http://core.svn.wordpress.org/trunk@35603 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
John Blackbourn 2015-11-15 23:00:28 +00:00
parent 40b303069a
commit 45658705f3
3 changed files with 4 additions and 2 deletions

View File

@ -603,6 +603,9 @@ function wp_magic_quotes() {
$_COOKIE = stripslashes_deep( $_COOKIE );
}
// Turn off sybase quoting after stripslashes has run
@ini_set( 'magic_quotes_sybase', 0 );
// Escape with wpdb.
$_GET = add_magic_quotes( $_GET );
$_POST = add_magic_quotes( $_POST );

View File

@ -4,7 +4,7 @@
*
* @global string $wp_version
*/
$wp_version = '4.4-beta4-35638';
$wp_version = '4.4-beta4-35639';
/**
* Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.

View File

@ -46,7 +46,6 @@ wp_check_php_mysql_versions();
// Disable magic quotes at runtime. Magic quotes are added using wpdb later in wp-settings.php.
@ini_set( 'magic_quotes_runtime', 0 );
@ini_set( 'magic_quotes_sybase', 0 );
// WordPress calculates offsets from UTC.
date_default_timezone_set( 'UTC' );