Changeset 11173 for trunk/wp-admin/import/blogger.php

Timestamp:

05/04/2009 05:54:08 PM (16 years ago)

Author:

ryan

Message:

Attr escaping

File:

• trunk/wp-admin/import/blogger.php (modified) (4 diffs)

trunk/wp-admin/import/blogger.php

@@ -52 +52 @@
         $prereqs = __('To use this importer, you must have a Google account and an upgraded (New, was Beta) blog hosted on blogspot.com or a custom domain (not FTP).');
         $stepone = __('The first thing you need to do is tell Blogger to let WordPress access your account. You will be sent back here after providing authorization.');
-        $auth = __('Authorize');
+        $auth = _a('Authorize');
 
         echo "
@@ -215 +215 @@
             else
                 $value = $authors;
+            $value = attr($value);
             $blogtitle = js_escape( $blog['title'] );
             $pdone = isset($blog['posts_done']) ? (int) $blog['posts_done'] : 0;
@@ -663 +664 @@
             $rows .= "<tr><td><label for='authors[$i]'>{$author[0]}</label></td><td><select name='authors[$i]' id='authors[$i]'>" . $this->get_user_options($author[1]) . "</select></td></tr>";
 
-        return "<div class='wrap'><h2>$heading</h2><h3>$blogtitle</h3><p>$directions</p><form action='index.php?import=blogger&amp;noheader=true&saveauthors=1' method='post'><input type='hidden' name='blog' value='$importing_blog' /><table cellpadding='5'><thead><td>$mapthis</td><td>$tothis</td></thead>$rows<tr><td></td><td class='submit'><input type='submit' class='button authorsubmit' value='$submit' /></td></tr></table></form></div>";
+        return "<div class='wrap'><h2>$heading</h2><h3>$blogtitle</h3><p>$directions</p><form action='index.php?import=blogger&amp;noheader=true&saveauthors=1' method='post'><input type='hidden' name='blog' value='" . attr($importing_blog) . "' /><table cellpadding='5'><thead><td>$mapthis</td><td>$tothis</td></thead>$rows<tr><td></td><td class='submit'><input type='submit' class='button authorsubmit' value='$submit' /></td></tr></table></form></div>";
     }
 
@@ -832 +833 @@
             $restart = __('Restart');
             $message = __('We have saved some information about your Blogger account in your WordPress database. Clearing this information will allow you to start over. Restarting will not affect any posts you have already imported. If you attempt to re-import a blog, duplicate posts and comments will be skipped.');
-            $submit = __('Clear account information');
+            $submit = _a('Clear account information');
             echo "<div class='wrap'><h2>$restart</h2><p>$message</p><form method='post' action='?import=blogger&amp;noheader=true'><p class='submit' style='text-align:left;'><input type='submit' class='button' value='$submit' name='restart' /></p></form></div>";
         }