Changeset 11110 for trunk/wp-admin/options-general.php

Timestamp:

04/28/2009 06:37:51 AM (17 years ago)

Author:

ryan

Message:

attr escaping. see #9650

File:

• trunk/wp-admin/options-general.php (modified) (3 diffs)

trunk/wp-admin/options-general.php

@@ -121 +121 @@
         $current_offset_name = $offset_name;
     }
-    echo "<option value=\"$offset\"$selected>" . sprintf(__('UTC %s'), $offset_name) . '</option>';
+    echo "<option value=\"" . attr($offset) . "\"$selected>" . sprintf(__('UTC %s'), $offset_name) . '</option>';
 }
 ?>
@@ -264 +264 @@
 for ($day_index = 0; $day_index <= 6; $day_index++) :
     $selected = (get_option('start_of_week') == $day_index) ? 'selected="selected"' : '';
-    echo "\n\t<option value='$day_index' $selected>" . $wp_locale->get_weekday($day_index) . '</option>';
+    echo "\n\t<option value='" . attr($day_index) . "' $selected>" . $wp_locale->get_weekday($day_index) . '</option>';
 endfor;
 ?>
@@ -275 +275 @@
 
 <p class="submit">
-<input type="submit" name="Submit" class="button-primary" value="<?php _e('Save Changes') ?>" />
+<input type="submit" name="Submit" class="button-primary" value="<?php _ea('Save Changes') ?>" />
 </p>
 </form>