5

I have a custom front end form which creates a custom post type post and have just discovered WordPress automatically escapes $_POST data in the same way that Magic Quotes does.

I have Magic Quotes disabled and have created a test form that I run on the same domain. When run on it's own, no data is escaped. However when I run it as a page template for a WordPress page the raw $_POST data is escaped, i.e. using print_r($_POST) so before there has been any processing done.

I have also tried this with multiple themes and the same result.

Anyone know where / how to shut this off? Is there a filter I can suppress for this form?

Cheers.

Improve this question

2 Answers 2

Reset to default
5

No, but you can just run stripslashes on it.

Improve this answer
1
  • Yeah thanks, I've done that already. Wanted to overide it because of all the reasons not to use Magic Quotes but I guess in WP the environment is always the same so it's not the same issue...
    – patnz
    Commented Nov 27, 2011 at 22:57
0

Worth having a read of the trac bug here: https://core.trac.wordpress.org/ticket/18322

In short, you can use stripslashes as onetrickpony already mentioned, or wp_unslash, to remove the slashes from your $_POST vars.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.