Changeset 11380 for trunk/wp-admin/edit-page-form.php

Timestamp:

05/18/2009 03:11:07 PM (16 years ago)

Author:

markjaquith

Message:

deprecate wp_specialchars() in favor of esc_html(). Encode quotes for esc_html() as in esc_attr(), to improve plugin security.

File:

• trunk/wp-admin/edit-page-form.php (modified) (3 diffs)

trunk/wp-admin/edit-page-form.php

@@ -159 +159 @@
 }
 
-echo wp_specialchars( $visibility_trans ); ?></span>
+echo esc_html( $visibility_trans ); ?></span>
 <?php if ( $can_publish ) { ?>
 <a href="#visibility" class="edit-visibility hide-if-no-js"><?php _e('Edit'); ?></a>
@@ -398 +398 @@
 <div class="wrap">
 <?php screen_icon(); ?>
-<h2><?php echo wp_specialchars( $title ); ?></h2>
+<h2><?php echo esc_html( $title ); ?></h2>
 
 <form name="post" action="page.php" method="post" id="post">
@@ -461 +461 @@
         if ( $last_id = get_post_meta($post_ID, '_edit_last', true) ) {
             $last_user = get_userdata($last_id);
-            printf(__('Last edited by %1$s on %2$s at %3$s'), wp_specialchars( $last_user->display_name ), mysql2date(get_option('date_format'), $post->post_modified), mysql2date(get_option('time_format'), $post->post_modified));
+            printf(__('Last edited by %1$s on %2$s at %3$s'), esc_html( $last_user->display_name ), mysql2date(get_option('date_format'), $post->post_modified), mysql2date(get_option('time_format'), $post->post_modified));
         } else {
             printf(__('Last edited on %1$s at %2$s'), mysql2date(get_option('date_format'), $post->post_modified), mysql2date(get_option('time_format'), $post->post_modified));