Changeset 1187 for trunk/wp-admin/categories.php

Timestamp:

04/27/2004 01:24:47 PM (22 years ago)

Author:

saxmatt

Message:

Fixes from forum thread: ​http://wordpress.org/support/6/4615.

File:

• trunk/wp-admin/categories.php (modified) (1 diff)

trunk/wp-admin/categories.php

@@ -123 +123 @@
         die (__('Cheatin’ uh?'));
     
-    $cat_name = addslashes(stripslashes(stripslashes($_POST['cat_name'])));
-    $cat_ID = addslashes($_POST['cat_ID']);
+    $cat_name = $wpdb->escape(stripslashes($_POST['cat_name']));
+    $cat_ID = (int) $_POST['cat_ID'];
     $category_nicename = sanitize_title($cat_name);
-    $category_description = $_POST['category_description'];
+    $category_description = $wpdb->escape(stripslashes($_POST['category_description']));
 
     $wpdb->query("UPDATE $tablecategories SET cat_name = '$cat_name', category_nicename = '$category_nicename', category_description = '$category_description', category_parent = $cat WHERE cat_ID = $cat_ID");