Changeset 12336

Timestamp:

12/08/2009 12:48:39 AM (15 years ago)

Author:

ryan

Message:

Use stripslashes_deep to strip meta values. Props JonathanRogers, Sewar. fixes #10656

File:

• trunk/wp-admin/includes/post.php (modified) (2 diffs)

trunk/wp-admin/includes/post.php

@@ -560 +560 @@
     $metakeyselect = isset($_POST['metakeyselect']) ? stripslashes( trim( $_POST['metakeyselect'] ) ) : '';
     $metakeyinput = isset($_POST['metakeyinput']) ? stripslashes( trim( $_POST['metakeyinput'] ) ) : '';
-    $metavalue = isset($_POST['metavalue']) ? maybe_serialize( stripslashes( trim( $_POST['metavalue'] ) ) ) : '';
+    $metavalue = isset($_POST['metavalue']) ? maybe_serialize( stripslashes_deep( $_POST['metavalue'] ) ) : '';
+    if ( is_string($metavalue) )
+        $metavalue = trim( $metavalue );
 
     if ( ('0' === $metavalue || !empty ( $metavalue ) ) && ((('#NONE#' != $metakeyselect) && !empty ( $metakeyselect) ) || !empty ( $metakeyinput) ) ) {
@@ -687 +689 @@
     wp_cache_delete($post_id, 'post_meta');
 
-    $meta_value = maybe_serialize( stripslashes( $meta_value ) );
+    $meta_value = maybe_serialize( stripslashes_deep( $meta_value ) );
     $meta_id = (int) $meta_id;