Changeset 11204 for trunk/wp-admin/admin-ajax.php

Timestamp:

05/05/2009 07:43:53 PM (16 years ago)

Author:

markjaquith

Message:

_a(), _ea(), _xa(), attr() are now esc_attr(), esc_attr_e(), esc_attr_x(), esc_attr() -- still short, but less cryptic. see #9650

File:

• trunk/wp-admin/admin-ajax.php (modified) (4 diffs)

trunk/wp-admin/admin-ajax.php

@@ -427 +427 @@
             'what' => 'link-category',
             'id' => $cat_id,
-            'data' => "<li id='link-category-$cat_id'><label for='in-link-category-$cat_id' class='selectit'><input value='" . attr($cat_id) . "' type='checkbox' checked='checked' name='link_category[]' id='in-link-category-$cat_id'/> $cat_name</label></li>",
+            'data' => "<li id='link-category-$cat_id'><label for='in-link-category-$cat_id' class='selectit'><input value='" . esc_attr($cat_id) . "' type='checkbox' checked='checked' name='link_category[]' id='in-link-category-$cat_id'/> $cat_name</label></li>",
             'position' => -1
         ) );
@@ -475 +475 @@
         $level++;
     }
-    $cat_full_name = attr($cat_full_name);
+    $cat_full_name = esc_attr($cat_full_name);
 
     $x = new WP_Ajax_Response( array(
@@ -553 +553 @@
 
     $tag_full_name = $tag->name;
-    $tag_full_name = attr($tag_full_name);
+    $tag_full_name = esc_attr($tag_full_name);
 
     $x = new WP_Ajax_Response( array(
@@ -1215 +1215 @@
         }
 
-        $html .= '<tr class="found-posts"><td class="found-radio"><input type="radio" id="found-'.$post->ID.'" name="found_post_id" value="' . attr($post->ID) . '"></td>';
+        $html .= '<tr class="found-posts"><td class="found-radio"><input type="radio" id="found-'.$post->ID.'" name="found_post_id" value="' . esc_attr($post->ID) . '"></td>';
         $html .= '<td><label for="found-'.$post->ID.'">'.wp_specialchars($post->post_title, true).'</label></td><td>'.wp_specialchars($time, true).'</td><td>'.wp_specialchars($stat, true).'</td></tr>'."\n\n";
     }