Changeset 11173 for trunk/wp-content/themes/default/comments-popup.php

Timestamp:

05/04/2009 05:54:08 PM (16 years ago)

Author:

ryan

Message:

Attr escaping

File:

• trunk/wp-content/themes/default/comments-popup.php (modified) (1 diff)

trunk/wp-content/themes/default/comments-popup.php

@@ -67 +67 @@
 <?php else : ?>
     <p>
-      <input type="text" name="author" id="author" class="textarea" value="<?php echo $comment_author; ?>" size="28" tabindex="1" />
+      <input type="text" name="author" id="author" class="textarea" value="<?php echo attr($comment_author); ?>" size="28" tabindex="1" />
        <label for="author">Name</label>
     </p>
 
     <p>
-      <input type="text" name="email" id="email" value="<?php echo $comment_author_email; ?>" size="28" tabindex="2" />
+      <input type="text" name="email" id="email" value="<?php echo attr($comment_author_email); ?>" size="28" tabindex="2" />
        <label for="email">E-mail</label>
     </p>
 
     <p>
-      <input type="text" name="url" id="url" value="<?php echo $comment_author_url; ?>" size="28" tabindex="3" />
+      <input type="text" name="url" id="url" value="<?php echo attr($comment_author_url); ?>" size="28" tabindex="3" />
        <label for="url"><abbr title="Universal Resource Locator">URL</abbr></label>
     </p>