Opened 8 years ago
Closed 8 years ago
#2869 closed enhancement (fixed)
$_POST does not check on existing keys in sponsor info
Reported by: |
|
Owned by: |
|
---|---|---|---|
Milestone: | Priority: | low | |
Component: | WordCamp Site & Plugins | Keywords: | good-first-bug has-patch |
Cc: |
Description
The sponsor invoice info is submitted and only checked on a few nonce and single post field. In theory certain $_POST keys could not be present. Although this would only trigger a notice, it might be better to use PHP's native filter_input
mechanism.
The function is save_post_sponsor
in the WordCamp_Post_Types_Plugin
class.
Attachments (2)
Change History (6)
#2
@
8 years ago
- Keywords good-first-bug added
- Owner set to coreymckrill
- Priority changed from lowest to low
- Status changed from new to accepted
Note: See
TracTickets for help on using
tickets.
Initial patch using filter_input