• I have found php bug in wp-includes/wp-class.php file

    201&202 line is about:
    preg_match(“#^$match#”, $request_match, $matches)

    that’s wrong use of preg_match – it can produce invalid regexp compilation if URL ($match variable) contains # char.

    Correct usage should be
    preg_match(“#^”.str_replace(“#”,”\#”,$match).”#” ….

    if you use starting and ending symbols you must be sure that it’s not containing in target expression

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • The topic ‘wp-class regexp bug’ is closed to new replies.