Ticket #25376: 25376-sanitize.diff
File 25376-sanitize.diff, 4.6 KB (added by , 11 years ago) |
---|
-
src/wp-includes/post.php
2011 2011 /** 2012 2012 * Filter the value of a specific post field to edit. 2013 2013 * 2014 * The dynamic portion of the hook name, $field, refers to the prefixed 2015 * post field name. For example, 'post_title'. 2014 * The dynamic portion of the hook name, $field, refers to the post field name. 2016 2015 * 2017 2016 * @since 2.3.0 2018 2017 * … … 2020 2019 * @param int $post_id Post ID. 2021 2020 */ 2022 2021 $value = apply_filters( "edit_{$field}", $value, $post_id ); 2023 2024 /**2025 * Filter the value of a specific post field to edit.2026 *2027 * The dynamic portion of the hook name, $field_no_prefix, refers to2028 * the post field name with no prefix. For example, 'title' instead2029 * of 'post_title'.2030 *2031 * @since 2.3.02032 * @deprecated 2.3.0 Use "edit_post_$field" instead.2033 *2034 * @param mixed $value Value of the post field.2035 * @param int $post_id Post ID.2036 */2037 2022 $value = apply_filters( "{$field_no_prefix}_edit_pre", $value, $post_id ); 2038 2023 } else { 2039 2040 /**2041 * Filter the value of a specific post field to edit.2042 *2043 * The dynamic portion of the hook name, $field, refers to the un-prefixed2044 * post field. For example, 'title' instead of 'post_title'.2045 *2046 * @since 2.3.02047 *2048 * @param mixed $value Value of the un-prefixed post field.2049 * @param int $post_id Post ID.2050 */2051 2024 $value = apply_filters( "edit_post_{$field}", $value, $post_id ); 2052 2025 } 2053 2026 … … 2063 2036 if ( $prefixed ) { 2064 2037 2065 2038 /** 2066 * Filter the value of a specific field before saving.2039 * Filter the value of a specific post field before saving. 2067 2040 * 2068 * The dynamic portion of the hook name, $field, refers to the 2069 * prefixed post field name. For example, 'post_title'. 2041 * The dynamic portion of the hook name, $field, refers to the post field name. 2070 2042 * 2071 2043 * @since 2.3.0 2072 2044 * 2073 2045 * @param mixed $value Value of the post field. 2074 2046 */ 2075 2047 $value = apply_filters( "pre_{$field}", $value ); 2076 2077 /**2078 * Filter the value of a specific field before saving.2079 *2080 * The dynamic portion of the hook name, $field_no_prefix, refers2081 * to the un-prefixed post field name. For example, 'title' instead2082 * of 'post_title'.2083 *2084 * @since 2.3.02085 * @deprecated 2.3.0 Use "pre_post_{$field}" instead.2086 *2087 * @param mixed $value Value of the post field.2088 */2089 2048 $value = apply_filters( "{$field_no_prefix}_save_pre", $value ); 2090 2049 } else { 2091 2092 /**2093 * Filter the value of a specific field before saving.2094 *2095 * The dynamic portion of the hook name, $field, refers to the un-prefixed2096 * post field name. For example, 'title' instead of 'post_title'.2097 *2098 * @since 2.3.02099 *2100 * @param mixed $value Value of the post field.2101 */2102 2050 $value = apply_filters( "pre_post_{$field}", $value ); 2103 2104 /**2105 * Filter the value of a specific field before saving.2106 *2107 * The dynamic portion of the hook name, $field, refers to the un-prefixed2108 * post field name. For example, 'title' instead of 'post_title'.2109 *2110 * @since 2.3.02111 * @deprecated 2.3.0 Use "pre_post_{$field}" instead.2112 *2113 * @param mixed $value Value of the post field.2114 */2115 2051 $value = apply_filters( "{$field}_pre", $value ); 2116 2052 } 2117 2053 } else { … … 2122 2058 /** 2123 2059 * Filter the value of a specific post field for display. 2124 2060 * 2125 * The dynamic hook name, $field, refers to the prefixed post field 2126 * name. For example, 'post_title'. 2061 * The dynamic portion of the hook name, $field, refers to the post field name. 2127 2062 * 2128 * @since 2063 * @since 2.3.0 2129 2064 * 2130 2065 * @param mixed $value Value of the prefixed post field. 2131 2066 * @param int $post_id Post ID. … … 2135 2070 */ 2136 2071 $value = apply_filters( $field, $value, $post_id, $context ); 2137 2072 } else { 2138 2139 /**2140 * Filter the value of a specific post field for display.2141 *2142 * The dynamic portion of the hook name, $field, refers to the un-prefixed2143 * post field name. For example, 'title' instead of 'post_title'.'2144 *2145 * @since2146 *2147 * @param mixed $value Value of the un-prefixed post field.2148 * @param int $post_id Post ID.2149 * @param string $context Context for how to sanitize the field. Possible2150 * values include 'raw', 'edit', 'db', 'display',2151 * 'attribute' and 'js'.2152 */2153 2073 $value = apply_filters( "post_{$field}", $value, $post_id, $context ); 2154 2074 } 2155 2075 }