Changeset 11110 for trunk/wp-admin/users.php

Timestamp:

04/28/2009 06:37:51 AM (17 years ago)

Author:

ryan

Message:

attr escaping. see #9650

File:

• trunk/wp-admin/users.php (modified) (6 diffs)

trunk/wp-admin/users.php

@@ -150 +150 @@
             echo "<li>" . sprintf(__('ID #%1s: %2s <strong>The current user will not be deleted.</strong>'), $id, $user->user_login) . "</li>\n";
         } else {
-            echo "<li><input type=\"hidden\" name=\"users[]\" value=\"{$id}\" />" . sprintf(__('ID #%1s: %2s'), $id, $user->user_login) . "</li>\n";
+            echo "<li><input type=\"hidden\" name=\"users[]\" value=\"" . attr($id) . "\" />" . sprintf(__('ID #%1s: %2s'), $id, $user->user_login) . "</li>\n";
             $go_delete = true;
         }
@@ -158 +158 @@
     foreach ( (array) $all_logins as $login )
         if ( $login->ID == $current_user->ID || !in_array($login->ID, $userids) )
-            $user_dropdown .= "<option value=\"{$login->ID}\">{$login->user_login}</option>";
+            $user_dropdown .= "<option value=\"" . attr($login->ID) . "\">{$login->user_login}</option>";
     $user_dropdown .= '</select>';
     ?>
@@ -171 +171 @@
     </ul></fieldset>
     <input type="hidden" name="action" value="dodelete" />
-    <p class="submit"><input type="submit" name="submit" value="<?php _e('Confirm Deletion'); ?>" class="button-secondary" /></p>
+    <p class="submit"><input type="submit" name="submit" value="<?php _ea('Confirm Deletion'); ?>" class="button-secondary" /></p>
 <?php else : ?>
     <p><?php _e('There are no valid users selected for deletion.'); ?></p>
@@ -293 +293 @@
     <label class="hidden" for="user-search-input"><?php _e( 'Search Users' ); ?>:</label>
     <input type="text" id="user-search-input" name="usersearch" value="<?php echo attr($wp_user_search->search_term); ?>" />
-    <input type="submit" value="<?php _e( 'Search Users' ); ?>" class="button" />
+    <input type="submit" value="<?php _ea( 'Search Users' ); ?>" class="button" />
 </p>
 </form>
@@ -309 +309 @@
 <option value="delete"><?php _e('Delete'); ?></option>
 </select>
-<input type="submit" value="<?php _e('Apply'); ?>" name="doaction" id="doaction" class="button-secondary action" />
+<input type="submit" value="<?php _ea('Apply'); ?>" name="doaction" id="doaction" class="button-secondary action" />
 <label class="hidden" for="new_role"><?php _e('Change role to&hellip;') ?></label><select name="new_role" id="new_role"><option value=''><?php _e('Change role to&hellip;') ?></option><?php wp_dropdown_roles(); ?></select>
-<input type="submit" value="<?php _e('Change'); ?>" name="changeit" class="button-secondary" />
+<input type="submit" value="<?php _ea('Change'); ?>" name="changeit" class="button-secondary" />
 <?php wp_nonce_field('bulk-users'); ?>
 </div>
@@ -375 +375 @@
 <option value="delete"><?php _e('Delete'); ?></option>
 </select>
-<input type="submit" value="<?php _e('Apply'); ?>" name="doaction2" id="doaction2" class="button-secondary action" />
+<input type="submit" value="<?php _ea('Apply'); ?>" name="doaction2" id="doaction2" class="button-secondary action" />
 </div>