Changeset 11929 for trunk/wp-admin/user-edit.php

Timestamp:

09/14/2009 01:57:48 PM (15 years ago)

Author:

ryan

Message:

Filter fields through kses upon display. Introduce sanitize_user_object() and sanitize_user_field(). see #10751

File:

• trunk/wp-admin/user-edit.php (modified) (4 diffs)

trunk/wp-admin/user-edit.php

@@ -285 +285 @@
 <tr>
     <th><label for="description"><?php _e('Biographical Info'); ?></label></th>
-    <td><textarea name="description" id="description" rows="5" cols="30"><?php echo $profileuser->description ?></textarea><br />
+    <td><textarea name="description" id="description" rows="5" cols="30"><?php echo esc_html($profileuser->description); ?></textarea><br />
     <span class="description"><?php _e('Share a little biographical information to fill out your profile. This may be shown publicly.'); ?></span></td>
 </tr>
@@ -312 +312 @@
 ?>
 
-<?php if (count($profileuser->caps) > count($profileuser->roles) && apply_filters('additional_capabilities_display', true, $profileuser)): ?>
+<?php if ( count($profileuser->caps) > count($profileuser->roles) && apply_filters('additional_capabilities_display', true, $profileuser) ) { ?>
 <br class="clear" />
     <table width="99%" style="border: none;" cellspacing="2" cellpadding="3" class="editform">
@@ -319 +319 @@
             <td><?php
             $output = '';
-            foreach($profileuser->caps as $cap => $value) {
-                if(!$wp_roles->is_role($cap)) {
-                    if($output != '') $output .= ', ';
+            foreach ( $profileuser->caps as $cap => $value ) {
+                if ( !$wp_roles->is_role($cap) ) {
+                    if ( $output != '' )
+                        $output .= ', ';
                     $output .= $value ? $cap : "Denied: {$cap}";
                 }
@@ -329 +330 @@
         </tr>
     </table>
-<?php endif; ?>
+<?php } ?>
 
 <p class="submit">