Changeset 11110 for trunk/wp-admin/options.php

Timestamp:

04/28/2009 06:37:51 AM (17 years ago)

Author:

ryan

Message:

attr escaping. see #9650

File:

• trunk/wp-admin/options.php (modified) (1 diff)

trunk/wp-admin/options.php

@@ -131 +131 @@
   </table>
 <?php $options_to_update = implode(',', $options_to_update); ?>
-<p class="submit"><input type="hidden" name="page_options" value="<?php echo $options_to_update; ?>" /><input type="submit" name="Update" value="<?php _e('Save Changes') ?>" class="button-primary" /></p>
+<p class="submit"><input type="hidden" name="page_options" value="<?php echo attr($options_to_update); ?>" /><input type="submit" name="Update" value="<?php _e('Save Changes') ?>" class="button-primary" /></p>
   </form>
 </div>