Input sanitization
-
Hi Fallas!
Thanks for your hard work on this plugin!
I would like to give you a heads-up on an error in the way in which you are sanitizing user input. You are adding an escape character every time the settings are save.
For example, say you are editing Auto Terms->Edit Auto Terms->Stop Words.
If one of the stop words contains an apostrophe ,the you naturally sanitize it by escaping it with a backslash. However, this occurs each and every time the input is saved, so you can end up with a string of backslashes thus:
I'mbecomesI\'mand on subsequent saves, another backslash is added, so it can eventually become:I\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'m. Yikes! You eventually will receive an entity too long error message from the server!I hope that I\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\’ve explained this so you can understand it.
The topic ‘Input sanitization’ is closed to new replies.