Allan Collins

Results 6 issues of Allan Collins

filter_input() is listed as an escaping function. However if the third parameter isn't set, then no sanitization takes place. Example: URL: http://test.dev/?test=%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E `echo filter_input( INPUT_GET, 'test' );` vs. `echo filter_input(...

Type: Enhancement
Focus: Security
Upstream: PHPCSExtra

Props to @tott for this solution.

It has been identified that Batcache only caches Apache headers. This becomes problematic when the server is nginx.

Some servers don't populate the $_ENV variable so environmental variables that are set cannot be read from PHP CLI. So getenv() was added to fetch those variables. Also, some WP...

Love this so far, but I've found that it adds spacing to array keys which it isn't supposed to do. http://make.wordpress.org/core/handbook/coding-standards/php/#space-usage This can be updated in the preferences, but I...

More unit tests are needed.