mirror of
https://github.com/gosticks/wordpress-develop.git
synced 2025-10-16 12:05:38 +00:00
d58aace6f7
See #25282. git-svn-id: https://develop.svn.wordpress.org/trunk@25393 602fd350-edb4-49c9-b593-d223f7449a82
212 lines
7.4 KiB
PHP
212 lines
7.4 KiB
PHP
<?php
|
|
|
|
/**
|
|
* @group user
|
|
* @group slashes
|
|
* @ticket 21767
|
|
*/
|
|
class Tests_User_Slashes extends WP_UnitTestCase {
|
|
function setUp() {
|
|
parent::setUp();
|
|
$this->author_id = $this->factory->user->create( array( 'role' => 'administrator' ) );
|
|
$this->old_current_user = get_current_user_id();
|
|
wp_set_current_user( $this->author_id );
|
|
|
|
// it is important to test with both even and odd numbered slashes as
|
|
// kses does a strip-then-add slashes in some of it's function calls
|
|
$this->slash_1 = 'String with 1 slash \\';
|
|
$this->slash_2 = 'String with 2 slashes \\\\';
|
|
$this->slash_3 = 'String with 3 slashes \\\\\\';
|
|
$this->slash_4 = 'String with 4 slashes \\\\\\\\';
|
|
$this->slash_5 = 'String with 5 slashes \\\\\\\\\\';
|
|
$this->slash_6 = 'String with 6 slashes \\\\\\\\\\\\';
|
|
$this->slash_7 = 'String with 7 slashes \\\\\\\\\\\\\\';
|
|
}
|
|
|
|
function tearDown() {
|
|
wp_set_current_user( $this->old_current_user );
|
|
parent::tearDown();
|
|
}
|
|
|
|
/**
|
|
* Tests the controller function that expects slashed data
|
|
*
|
|
*/
|
|
function test_add_user() {
|
|
$_POST = $_GET = $_REQUEST = array();
|
|
$_POST['user_login'] = 'slash_example_user_1';
|
|
$_POST['pass1'] = 'password';
|
|
$_POST['pass2'] = 'password';
|
|
$_POST['role'] = 'subscriber';
|
|
$_POST['email'] = 'user1@example.com';
|
|
$_POST['first_name'] = $this->slash_1;
|
|
$_POST['last_name'] = $this->slash_3;
|
|
$_POST['nickname'] = $this->slash_5;
|
|
$_POST['display_name'] = $this->slash_7;
|
|
$_POST['description'] = $this->slash_3;
|
|
$_POST = add_magic_quotes( $_POST ); // the edit_post() function will strip slashes
|
|
|
|
$id = add_user();
|
|
$user = get_user_to_edit( $id );
|
|
|
|
$this->assertEquals( $this->slash_1, $user->first_name );
|
|
$this->assertEquals( $this->slash_3, $user->last_name );
|
|
$this->assertEquals( $this->slash_5, $user->nickname );
|
|
$this->assertEquals( $this->slash_7, $user->display_name );
|
|
$this->assertEquals( $this->slash_3, $user->description );
|
|
|
|
$_POST = $_GET = $_REQUEST = array();
|
|
$_POST['user_login'] = 'slash_example_user_2';
|
|
$_POST['pass1'] = 'password';
|
|
$_POST['pass2'] = 'password';
|
|
$_POST['role'] = 'subscriber';
|
|
$_POST['email'] = 'user2@example.com';
|
|
$_POST['first_name'] = $this->slash_2;
|
|
$_POST['last_name'] = $this->slash_4;
|
|
$_POST['nickname'] = $this->slash_6;
|
|
$_POST['display_name'] = $this->slash_2;
|
|
$_POST['description'] = $this->slash_4;
|
|
$_POST = add_magic_quotes( $_POST ); // the edit_post() function will strip slashes
|
|
|
|
$id = add_user();
|
|
$user = get_user_to_edit( $id );
|
|
|
|
$this->assertEquals( $this->slash_2, $user->first_name );
|
|
$this->assertEquals( $this->slash_4, $user->last_name );
|
|
$this->assertEquals( $this->slash_6, $user->nickname );
|
|
$this->assertEquals( $this->slash_2, $user->display_name );
|
|
$this->assertEquals( $this->slash_4, $user->description );
|
|
}
|
|
|
|
/**
|
|
* Tests the controller function that expects slashed data
|
|
*
|
|
*/
|
|
function test_edit_user() {
|
|
$id = $this->factory->user->create();
|
|
|
|
$_POST = $_GET = $_REQUEST = array();
|
|
$_POST['role'] = 'subscriber';
|
|
$_POST['email'] = 'user1@example.com';
|
|
$_POST['first_name'] = $this->slash_1;
|
|
$_POST['last_name'] = $this->slash_3;
|
|
$_POST['nickname'] = $this->slash_5;
|
|
$_POST['display_name'] = $this->slash_7;
|
|
$_POST['description'] = $this->slash_3;
|
|
$_POST = add_magic_quotes( $_POST ); // the edit_post() function will strip slashes
|
|
|
|
$id = edit_user( $id );
|
|
$user = get_user_to_edit( $id );
|
|
|
|
$this->assertEquals( $this->slash_1, $user->first_name );
|
|
$this->assertEquals( $this->slash_3, $user->last_name );
|
|
$this->assertEquals( $this->slash_5, $user->nickname );
|
|
$this->assertEquals( $this->slash_7, $user->display_name );
|
|
$this->assertEquals( $this->slash_3, $user->description );
|
|
|
|
$_POST = $_GET = $_REQUEST = array();
|
|
$_POST['role'] = 'subscriber';
|
|
$_POST['email'] = 'user2@example.com';
|
|
$_POST['first_name'] = $this->slash_2;
|
|
$_POST['last_name'] = $this->slash_4;
|
|
$_POST['nickname'] = $this->slash_6;
|
|
$_POST['display_name'] = $this->slash_2;
|
|
$_POST['description'] = $this->slash_4;
|
|
$_POST = add_magic_quotes( $_POST ); // the edit_post() function will strip slashes
|
|
|
|
$id = edit_user( $id );
|
|
$user = get_user_to_edit( $id );
|
|
|
|
$this->assertEquals( $this->slash_2, $user->first_name );
|
|
$this->assertEquals( $this->slash_4, $user->last_name );
|
|
$this->assertEquals( $this->slash_6, $user->nickname );
|
|
$this->assertEquals( $this->slash_2, $user->display_name );
|
|
$this->assertEquals( $this->slash_4, $user->description );
|
|
}
|
|
|
|
/**
|
|
* Tests the model function that expects slashed data
|
|
*
|
|
*/
|
|
function test_wp_insert_user() {
|
|
$id = wp_insert_user( array(
|
|
'user_login' => 'slash_example_user_3',
|
|
'role' => 'subscriber',
|
|
'email' => 'user3@example.com',
|
|
'first_name' => $this->slash_1,
|
|
'last_name' => $this->slash_3,
|
|
'nickname' => $this->slash_5,
|
|
'display_name' => $this->slash_7,
|
|
'description' => $this->slash_3,
|
|
'user_pass' => ''
|
|
) );
|
|
$user = get_user_to_edit( $id );
|
|
|
|
$this->assertEquals( wp_unslash( $this->slash_1 ), $user->first_name );
|
|
$this->assertEquals( wp_unslash( $this->slash_3 ), $user->last_name );
|
|
$this->assertEquals( wp_unslash( $this->slash_5 ), $user->nickname );
|
|
$this->assertEquals( wp_unslash( $this->slash_7 ), $user->display_name );
|
|
$this->assertEquals( wp_unslash( $this->slash_3 ), $user->description );
|
|
|
|
$id = wp_insert_user( array(
|
|
'user_login' => 'slash_example_user_4',
|
|
'role' => 'subscriber',
|
|
'email' => 'user3@example.com',
|
|
'first_name' => $this->slash_2,
|
|
'last_name' => $this->slash_4,
|
|
'nickname' => $this->slash_6,
|
|
'display_name' => $this->slash_2,
|
|
'description' => $this->slash_4,
|
|
'user_pass' => ''
|
|
) );
|
|
$user = get_user_to_edit( $id );
|
|
|
|
$this->assertEquals( wp_unslash( $this->slash_2 ), $user->first_name );
|
|
$this->assertEquals( wp_unslash( $this->slash_4 ), $user->last_name );
|
|
$this->assertEquals( wp_unslash( $this->slash_6 ), $user->nickname );
|
|
$this->assertEquals( wp_unslash( $this->slash_2 ), $user->display_name );
|
|
$this->assertEquals( wp_unslash( $this->slash_4 ), $user->description );
|
|
}
|
|
|
|
/**
|
|
* Tests the model function that expects slashed data
|
|
*
|
|
*/
|
|
function test_wp_update_user() {
|
|
$id = $this->factory->user->create();
|
|
$id = wp_update_user(array(
|
|
'ID' => $id,
|
|
'role' => 'subscriber',
|
|
'first_name' => $this->slash_1,
|
|
'last_name' => $this->slash_3,
|
|
'nickname' => $this->slash_5,
|
|
'display_name' => $this->slash_7,
|
|
'description' => $this->slash_3,
|
|
));
|
|
$user = get_user_to_edit( $id );
|
|
|
|
$this->assertEquals( wp_unslash( $this->slash_1 ), $user->first_name );
|
|
$this->assertEquals( wp_unslash( $this->slash_3 ), $user->last_name );
|
|
$this->assertEquals( wp_unslash( $this->slash_5 ), $user->nickname );
|
|
$this->assertEquals( wp_unslash( $this->slash_7 ), $user->display_name );
|
|
$this->assertEquals( wp_unslash( $this->slash_3 ), $user->description );
|
|
|
|
$id = wp_update_user(array(
|
|
'ID' => $id,
|
|
'role' => 'subscriber',
|
|
'first_name' => $this->slash_2,
|
|
'last_name' => $this->slash_4,
|
|
'nickname' => $this->slash_6,
|
|
'display_name' => $this->slash_2,
|
|
'description' => $this->slash_4,
|
|
));
|
|
$user = get_user_to_edit( $id );
|
|
|
|
$this->assertEquals( wp_unslash( $this->slash_2 ), $user->first_name );
|
|
$this->assertEquals( wp_unslash( $this->slash_4 ), $user->last_name );
|
|
$this->assertEquals( wp_unslash( $this->slash_6 ), $user->nickname );
|
|
$this->assertEquals( wp_unslash( $this->slash_2 ), $user->display_name );
|
|
$this->assertEquals( wp_unslash( $this->slash_4 ), $user->description );
|
|
}
|
|
|
|
} |