February 4, 2012

Can’t escape with XML-RPC

wordpress xml-rpc escapes all of my single and double quotes when posting using flock, or any other external editor for that matter. Not a new issue, apparently. The same xml-rpc also prevents me from posting to my categories, which is a smaller pain.

The new xmlrpc.php includes a brand new escape() that adds escape sequence (a \ in this case) to the data when received from xml-rpc in an effort to combat sql injection holes. Tunnel vision in my mind. It just ended up breaking a whole lot of OTHER THINGS!. Scott is livid, like he should be. I am too, but I only have one measly blog.

Now I’ll head over to blogsome and see if they have a fix for it in 1.5.2

Technorati Tags: , , flock

Trackbacks

  1. [...] had posted the problem with xmlrpc here last October. I have also been helping the guys with some testing. Check out the ugly post here. [...]

Speak Your Mind

*