Changeset 10620

Timestamp:

02/22/2009 12:35:42 AM (16 years ago)

Author:

ryan

Message:

Escape before passing to insert/update post. Props hailin. fixes #9199 for trunk

File:

• trunk/wp-includes/post.php (modified) (2 diffs)

trunk/wp-includes/post.php

@@ -3508 +3508 @@
 
     $post = _wp_post_revision_fields( $post, $autosave );
-
+    $post = add_magic_quotes($post); //since data is from db
+    
     $revision_id = wp_insert_post( $post );
     if ( is_wp_error($revision_id) )
@@ -3584 +3585 @@
 
     $update['ID'] = $revision['post_parent'];
+    
+    $update = add_magic_quotes( $update ); //since data is from db
 
     $post_id = wp_update_post( $update );