Changeset 10620

Timestamp:

02/22/2009 12:35:42 AM (17 years ago)

Author:

ryan

Message:

Escape before passing to insert/update post. Props hailin. fixes #9199 for trunk

File:

• trunk/wp-includes/post.php (modified) (2 diffs)

trunk/wp-includes/post.php

@@ -3508 +3508 @@
 
         $post = _wp_post_revision_fields( $post, $autosave );
-
+        $post = add_magic_quotes($post); //since data is from db
+        
         $revision_id = wp_insert_post( $post );
         if ( is_wp_error($revision_id) )
@@ -3584 +3585 @@
 
         $update['ID'] = $revision['post_parent'];
+        
+        $update = add_magic_quotes( $update ); //since data is from db
 
         $post_id = wp_update_post( $update );