WordPress/wp-includes
Gary Pendergast 8255d04abb WPDB: Check that AUTH_SALT is not empty.
In `wpdb::placeholder_escape()`, the key for `hash_hmac()` defaults to `AUTH_SALT`, but `hash_hmac()` will return an empty string if the key is empty.

This had the side effect of the string `{}` being incorrectly replaced with a `%` character in queries just about to be run on the database.

Props jsonfry.
Fixes #42431.


Built from https://develop.svn.wordpress.org/trunk@42120


git-svn-id: http://core.svn.wordpress.org/trunk@41949 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2017-11-07 01:09:47 +00:00
..
certificates
css Accessibility: Change all the #f00 and red to the official WordPress accent red. 2017-10-03 16:03:32 +00:00
customize Customize: Fall back to ISO date format for date/time control inputs if year, month, or day are missing from the date_format option. 2017-11-06 20:28:48 +00:00
fonts
ID3 Media: update the getID3 library to version 1.9.14 to avoid fatal errors in PHP7. 2017-07-31 19:50:45 +00:00
images
IXR
js Codemirror: Unify line endings in csslint.js 2017-11-02 22:31:47 +00:00
pomo I18N: Fix a PHP error introduced in [41722]. 2017-10-04 02:12:46 +00:00
random_compat
Requests
rest-api REST API: Don’t remove unregistered properties from objects in schema. 2017-10-24 21:05:49 +00:00
SimplePie
Text External Libraries: Remove usage of each() from the Text_Diff_Engine_native class. 2017-10-26 12:52:53 +00:00
theme-compat Embeds: Avoid "Division by zero" warning in embed-content.php template if a thumbnail has a zero height. 2017-10-18 15:09:48 +00:00
widgets Widgets: Prevent showing underlying attachment excerpt as caption when empty caption value is supplied in Image widget. 2017-10-27 05:05:51 +00:00
admin-bar.php Users: Remove some links to the dashboard from My Sites for users who cannot access it. 2017-10-09 15:22:46 +00:00
atomlib.php
author-template.php Editor: Add CodeMirror-powered code editor with syntax highlighting, linting, and auto-completion. 2017-09-13 06:08:47 +00:00
bookmark-template.php
bookmark.php
cache.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
canonical.php Canonical: Strip trailing punctuation from permalinks. 2017-10-24 14:18:48 +00:00
capabilities.php Role/Capability: Prevent a fatal error when checking a language capability early or in the frontend. 2017-10-16 22:54:57 +00:00
category-template.php Taxonomy: After [40903], restore documentation for wp_dropdown_categories() arguments that are different from the defaults in WP_Term_Query::__construct(). 2017-10-05 01:57:48 +00:00
category.php
class-feed.php
class-http.php Docs: Correct type and description for the $data parameter in WP_Http::browser_redirect_compatibility(). 2017-10-18 16:38:48 +00:00
class-IXR.php
class-json.php
class-oembed.php Embeds: Add oEmbed support for someecards.com. 2017-10-02 19:10:49 +00:00
class-phpass.php
class-phpmailer.php
class-pop3.php
class-requests.php
class-simplepie.php
class-smtp.php
class-snoopy.php
class-walker-category-dropdown.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-walker-category.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-walker-comment.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-walker-nav-menu.php Menus: Remove an extra space in the <ul> tag in Walker_Nav_Menu::start_lvl(). 2017-10-20 10:40:46 +00:00
class-walker-page-dropdown.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-walker-page.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-admin-bar.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-ajax-response.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-comment-query.php Docs: Remove & prefixes from parameter documentation to avoid doc parsing errors. 2017-10-02 22:03:33 +00:00
class-wp-comment.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-customize-control.php Customize: Deprecate nav menu classes that are no longer used, instead of removing them immediately. 2017-10-28 05:48:47 +00:00
class-wp-customize-manager.php Customize: Always use underlying changeset post date as initial date in scheduled date fields if date is future. 2017-11-02 20:00:48 +00:00
class-wp-customize-nav-menus.php Customize: Allow previewed menus to be customized 2017-10-24 18:35:48 +00:00
class-wp-customize-panel.php Accessibility: CodeMirror editing areas minor improvements. 2017-09-24 16:00:46 +00:00
class-wp-customize-section.php Customize: Deprecate nav menu classes that are no longer used, instead of removing them immediately. 2017-10-28 05:48:47 +00:00
class-wp-customize-setting.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-customize-widgets.php Widgets: Rename "Custom Menu" widget to "Navigation Menu". 2017-10-15 22:23:47 +00:00
class-wp-dependency.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-editor.php Docs: Document $default_scripts parameter in _WP_Editors::enqueue_scripts(). 2017-10-18 18:09:47 +00:00
class-wp-embed.php Embeds: Improve consistency of update and refresh logic for oEmbed caching between oembed_cache and post meta. 2017-10-24 23:10:48 +00:00
class-wp-error.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-feed-cache-transient.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-feed-cache.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-hook.php Docs: Use correct order of arguments in the DocBlock for WP_Hook::has_filter(). 2017-09-21 10:00:48 +00:00
class-wp-http-cookie.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-http-curl.php I18N: Replace function name in error message in WP_Http_Curl::request() and WP_Http_Streams::request() with a placeholder. 2017-10-18 15:04:51 +00:00
class-wp-http-encoding.php
class-wp-http-ixr-client.php
class-wp-http-proxy.php
class-wp-http-requests-hooks.php Docs: Remove superfluous @package WordPress and @subpackage notations used outside of file headers in a variety of core files. 2017-07-01 16:58:42 +00:00
class-wp-http-requests-response.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-http-response.php HTTP API: Use WP_HTTP_Response::set_data() in ::__construct() instead of directly accessing the $data property. 2017-10-03 15:18:46 +00:00
class-wp-http-streams.php I18N: Replace function name in error message in WP_Http_Curl::request() and WP_Http_Streams::request() with a placeholder. 2017-10-18 15:04:51 +00:00
class-wp-image-editor-gd.php Media: Rename several attachment related parameters from $post_id to $attachment_id for clarity, and improve related 2017-08-22 11:12:44 +00:00
class-wp-image-editor-imagick.php Media: Rename several attachment related parameters from $post_id to $attachment_id for clarity, and improve related 2017-08-22 11:12:44 +00:00
class-wp-image-editor.php Media: Rename several attachment related parameters from $post_id to $attachment_id for clarity, and improve related 2017-08-22 11:12:44 +00:00
class-wp-list-util.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-locale-switcher.php General: Improve terminology used when referring to installations of WordPress and its extensions. 2017-08-22 11:52:48 +00:00
class-wp-locale.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-matchesmapregex.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-meta-query.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-metadata-lazyloader.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-network-query.php Multisite: Document all return types in get_networks(). 2017-10-18 18:13:50 +00:00
class-wp-network.php Multisite: Pass network object instead of ID to pre_get_main_site_id. 2017-10-30 19:56:47 +00:00
class-wp-oembed-controller.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-post-type.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-post.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-query.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-rewrite.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-role.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-roles.php Multisite: Improve initializing available roles when switch sites. 2017-09-27 21:44:44 +00:00
class-wp-session-tokens.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-simplepie-file.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-simplepie-sanitize-kses.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-site-query.php Multisite: Document all return types in get_sites(). 2017-10-18 17:39:46 +00:00
class-wp-site.php Multisite: Revert [41719]. 2017-10-16 22:29:48 +00:00
class-wp-tax-query.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-taxonomy.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-term-query.php Taxonomy: Add note about $number inconsistency to WP_Term_Query docs. 2017-10-16 18:38:48 +00:00
class-wp-term.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-text-diff-renderer-inline.php
class-wp-text-diff-renderer-table.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-theme.php Themes: Show templates from both parent and child theme when calling WP_Theme::get_post_templates(). 2017-10-23 20:08:47 +00:00
class-wp-user-meta-session-tokens.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-user-query.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-user.php Multisite: Initialize a user's roles correctly when setting them up for a different site. 2017-09-27 21:10:45 +00:00
class-wp-walker.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-widget-factory.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class-wp-widget.php Docs: Standardise the format used for documenting parameters passed by reference. 2017-10-02 22:14:46 +00:00
class-wp-xmlrpc-server.php Comments: Check if wp_new_comment() returns an error. 2017-10-23 22:12:51 +00:00
class-wp.php Docs: Remove & prefixes from parameter documentation to avoid doc parsing errors. 2017-10-02 22:03:33 +00:00
class.wp-dependencies.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
class.wp-scripts.php Docs: Remove & prefixes from parameter documentation to avoid doc parsing errors. 2017-10-02 22:03:33 +00:00
class.wp-styles.php Docs: Remove & prefixes from parameter documentation to avoid doc parsing errors. 2017-10-02 22:03:33 +00:00
comment-template.php Docs: Clarify that get_comments_number() can return either a numeric string (for compatibility reasons) or 0 if the post doesn't exist. 2017-08-20 20:13:47 +00:00
comment.php Comments: Check if wp_new_comment() returns an error. 2017-10-23 22:12:51 +00:00
compat.php General: Move the __autoload() compat function into its own file to prevent deprecated notices being thrown by the compiler in PHP 7.2. 2017-07-28 01:15:52 +00:00
cron.php Docs: Use third-person singular verbs in the summaries for wp_unschedule_hook() and wp_clear_scheduled_hook(). 2017-06-30 04:54:41 +00:00
date.php Docs: Remove @access notations from method DocBlocks in wp-includes/* classes. 2017-07-27 00:41:44 +00:00
default-constants.php Docs: Document $wp_version global in wp_initial_constants(). 2017-10-20 22:04:56 +00:00
default-filters.php Dashboard: Remove "Try Gutenberg" callout. 2017-10-23 20:48:47 +00:00
default-widgets.php Widgets: Introduce Gallery widget for displaying image galleries. 2017-09-25 06:28:45 +00:00
deprecated.php General: Correct _deprecated_function() calls in debug_fopen(), debug_fwrite(), and debug_fclose(). 2017-10-07 00:40:52 +00:00
embed-template.php
embed.php Customize: Introduce a new experience for discovering, installing, and previewing themes within the customizer. 2017-09-29 20:13:50 +00:00
feed-atom-comments.php
feed-atom.php
feed-rdf.php
feed-rss2-comments.php
feed-rss2.php
feed-rss.php
feed.php Docs: Remove & prefixes from parameter documentation to avoid doc parsing errors. 2017-10-02 22:03:33 +00:00
formatting.php Database: Restore numbered placeholders in wpdb::prepare(). 2017-10-31 12:00:49 +00:00
functions.php Filesystem API: Add more specificity to the rules for valid files in validate_file(). 2017-10-24 23:15:49 +00:00
functions.wp-scripts.php
functions.wp-styles.php
general-template.php Code Editor: Define default gutters and toggle lint markers based on changes to lint option. 2017-10-24 16:35:54 +00:00
http.php Docs: Add @access private entries for _get_component_from_parsed_url_array() and _wp_translate_php_url_constant_to_key(). 2017-09-22 22:00:47 +00:00
kses.php Docs: Adjust notation for the $context parameter in the DocBlocks for the wp_kses_allowed_html() function and its associated wp_kses_allowed_html filter. 2017-06-25 22:16:40 +00:00
l10n.php I18N: Make sure wp_dropdown_languages() does not print out empty name and id attributes. 2017-10-04 15:23:46 +00:00
link-template.php Posts, Post Types: Pass the order parameter to get_{$adjacent}_post_sort filter. 2017-09-24 23:01:44 +00:00
load.php Docs: Document $ini_all staticvar in wp_is_ini_value_changeable(). 2017-10-18 19:54:48 +00:00
locale.php
media-template.php Media: Set correct value for "Link Rel" field in Image Details modal. 2017-08-31 11:17:45 +00:00
media.php Customizer: Improve handling of crops in the media library. 2017-10-19 04:18:47 +00:00
meta.php Database: Restore numbered placeholders in wpdb::prepare(). 2017-10-31 12:00:49 +00:00
ms-blogs.php Multisite: Document all return types in get_networks(). 2017-10-18 18:13:50 +00:00
ms-default-constants.php Multisite: Use get_current_blog_id() instead of $wpdb->blogid. 2017-10-02 01:44:47 +00:00
ms-default-filters.php Multisite: Only update a site's post count when post types of post are updated. 2017-10-02 03:09:44 +00:00
ms-deprecated.php Docs: Correct some @since MU notation that was broken in [41200]. 2017-10-03 17:44:48 +00:00
ms-files.php
ms-functions.php Users: Revert [41613], [41614], and [41623] as this feature needs some more work. 2017-10-04 22:17:46 +00:00
ms-load.php Multisite: Use WP_Network_Query in ms_load_current_site_and_network(). 2017-10-03 19:26:49 +00:00
ms-settings.php Multisite: Explicitly globalize global variables in ms-settings.php. 2017-10-16 17:06:48 +00:00
nav-menu-template.php Menus: Make sure current-menu-parent and current-menu-ancestor classes are properly set for parent items of post type archive submenu items. 2017-07-05 21:31:44 +00:00
nav-menu.php Menus: Add menu-$i slugs to mapping groups 2017-10-25 22:29:49 +00:00
option.php Transients: After [41963], add missing cron task for delete_expired_transients(). 2017-10-24 23:00:47 +00:00
pluggable-deprecated.php
pluggable.php Comments: Change IP references in moderation option labels and email notifications to IP address for clarity. 2017-10-03 13:09:47 +00:00
plugin.php Revert "Add wp.hooks - JavaScript actions and filters." 2017-10-04 20:25:49 +00:00
post-formats.php Docs: Improve the return description for get_post_format_slugs() to note that the array contains slugs as both keys and values. 2017-08-20 20:03:54 +00:00
post-template.php I18N: Allow for post custom field name in the_meta() to be translated, e.g. to insert a non-breaking space before the colon. 2017-09-24 11:28:46 +00:00
post-thumbnail-template.php Post Thumbnails: Pass post ID to post_thumbnail_size filter. 2017-08-18 18:19:44 +00:00
post.php Database: Restore numbered placeholders in wpdb::prepare(). 2017-10-31 12:00:49 +00:00
query.php Docs: Remove some more top-level @aacess tags from function DocBlocks. 2017-07-27 08:19:43 +00:00
registration-functions.php
registration.php
rest-api.php REST API: Don’t remove unregistered properties from objects in schema. 2017-10-24 21:05:49 +00:00
revision.php
rewrite.php Rewrite: In url_to_postid(), bail early if the URL does not belong to the site. 2017-10-06 23:29:51 +00:00
rss-functions.php
rss.php
script-loader.php Customize: Allow 0:00-0:59 in date/time control when 24-hour time used. 2017-10-30 16:40:47 +00:00
session.php
shortcodes.php Docs: Fix a typo in the DocBlock description for add_shortcode() introduced in [41281]. 2017-08-20 20:38:42 +00:00
spl-autoload-compat.php General: Move the __autoload() compat function into its own file to prevent deprecated notices being thrown by the compiler in PHP 7.2. 2017-07-28 01:15:52 +00:00
taxonomy.php Taxonomy: After [40984], add the most_used label for non-hierarchical taxonomies too, and use it on the Menus screen. 2017-10-24 11:23:24 +00:00
template-loader.php
template.php Docs: Don't reference non-existent hooks inline in the DocBlock descriptions for the following template functions: 2017-06-29 16:05:41 +00:00
theme.php Customize: Allow previewed menus to be customized 2017-10-24 18:35:48 +00:00
update.php Docs: Correct docs introduced in [41965]. 2017-10-21 22:42:51 +00:00
user.php Docs: Correct some @since MU notation that was broken in [41200]. 2017-10-03 17:44:48 +00:00
vars.php General: Introduce a wp_is_mobile filter for controlling whether a request should be treated as coming from a mobile device. 2017-06-15 12:05:42 +00:00
version.php WPDB: Check that AUTH_SALT is not empty. 2017-11-07 01:09:47 +00:00
widgets.php Docs: After [37329], update the documentation for register_widget() and unregister_widget(). 2017-10-19 13:51:50 +00:00
wlwmanifest.xml
wp-db.php WPDB: Check that AUTH_SALT is not empty. 2017-11-07 01:09:47 +00:00
wp-diff.php