Burnt WordPress

Talking about burnt: it looks like WordPress is pretty much acting up with a couple of ‘SQL-errors’ on my side. They happen to appear around the time I press the ‘Save’ button. WordPress returns the following error:

UPDATE IGNORE wp_posts SET .... (and posting information follows).

I have the impression something goes wrong with escaping single quotes. I’m testing this right now.

Update 1: WordPress has problems with escaping of single quotes. A quick test of the previous entry seems to illustrate this.

Update 2: It’s a combination of sorts and version differences make it harder to see where it goes wrong. On my test server escaping or not escaping doesn’t throw an error at all (version: 4.0.24_Debian-10-log vs. Dreamhost 4.1.14-Debian_3-log) . Different versions PHP too: home runs 4.3.10-16, and Dreamhost 4.4.2. (if you’re not familiar with how to extract PHP info, you can run php -i > test.html for 4.4.x versions: php will generate an html file). I still think it’s a magic quotes issue (and probably a bug introduced in WP 2.0.1)

Update 3: Priceless comment about “magic quotes”. Developers, please escape your quotes (or convert those quotes to html entities).

Update 4: Thread to watch at WordPress.org

This entry was posted in Wordpress. Bookmark the permalink.