Changeset 11383 for trunk/wp-admin/press-this.php

Timestamp:

05/18/2009 04:00:33 PM (12 years ago)

Author:

markjaquith

Message:

Deprecate sanitize_url() and clean_url() in favor of esc_url_raw() and esc_url()

File:

• trunk/wp-admin/press-this.php (modified) (7 diffs)

trunk/wp-admin/press-this.php

@@ -98 +98 @@
     $selection = '<p>'.str_replace('<p></p>', '', $selection).'</p>';
 }
-$url = isset($_GET['u']) ? clean_url($_GET['u']) : '';
+$url = isset($_GET['u']) ? esc_url($_GET['u']) : '';
 $image = isset($_GET['i']) ? $_GET['i'] : '';
 
@@ -141 +141 @@
 
         <p class="centered"><input type="hidden" name="this_photo" value="<?php echo esc_attr($image); ?>" id="this_photo" />
-            <a href="#" class="select"><img src="<?php echo clean_url($image); ?>" alt="<?php echo esc_attr(__('Click to insert.')); ?>" title="<?php echo esc_attr(__('Click to insert.')); ?>" /></a></p>
+            <a href="#" class="select"><img src="<?php echo esc_url($image); ?>" alt="<?php echo esc_attr(__('Click to insert.')); ?>" title="<?php echo esc_attr(__('Click to insert.')); ?>" /></a></p>
 
         <p id="options"><a href="#" class="select button"><?php _e('Insert Image'); ?></a> <a href="#" class="cancel button"><?php _e('Cancel'); ?></a></p>
@@ -206 +206 @@
                     else
                         $src = 'http://'.str_replace('//','/', $host['host'].'/'.dirname($host['path']).'/'.$src);
-                $sources[] = clean_url($src);
+                $sources[] = esc_url($src);
             }
             return "'" . implode("','", $sources) . "'";
@@ -223 +223 @@
                 jQuery.ajax({
                     type: "GET",
-                    url: "<?php echo clean_url($_SERVER['PHP_SELF']); ?>",
+                    url: "<?php echo esc_url($_SERVER['PHP_SELF']); ?>",
                     cache : false,
                     async : false,
@@ -234 +234 @@
                 jQuery.ajax({
                     type: "GET",
-                    url: "<?php echo clean_url($_SERVER['PHP_SELF']); ?>",
+                    url: "<?php echo esc_url($_SERVER['PHP_SELF']); ?>",
                     cache : false,
                     async : false,
@@ -378 +378 @@
         switch(tab_name) {
             case 'video' :
-                jQuery('#extra_fields').load('<?php echo clean_url($_SERVER['PHP_SELF']); ?>', { ajax: 'video', s: '<?php echo esc_attr($selection); ?>'}, function() {
+                jQuery('#extra_fields').load('<?php echo esc_url($_SERVER['PHP_SELF']); ?>', { ajax: 'video', s: '<?php echo esc_attr($selection); ?>'}, function() {
                     <?php
                     $content = '';
@@ -407 +407 @@
                     type: "GET",
                     cache : false,
-                    url: "<?php echo clean_url($_SERVER['PHP_SELF']); ?>",
+                    url: "<?php echo esc_url($_SERVER['PHP_SELF']); ?>",
                     data: "ajax=photo_js&u=<?php echo urlencode($url)?>",
                     dataType : "script",