-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hiram Clawson wrote:
If you take a look at this hidden value line in the resulting page text, you will note it looks something like this:
<input type='hidden' value="+\" name="wpEditToken" />
Note the extra back-slash in the value="+" string. Something is fishy there, it shouldn't be there.
Nothing fishy there -- the "+" are stuck on the edit token to help protect against bots which don't parse HTML correctly. If it doesn't come back intact, we don't accept the edit -- this prevents the page text from getting corrupted by the bogus bot.
This little bug caused problems in out down-stream processing which was trying to parse this FORM INPUT variable.
The bug is in your processing.
- -- brion