Changeset 12336

Timestamp:

12/08/2009 12:48:39 AM (17 years ago)

Author:

ryan

Message:

Use stripslashes_deep to strip meta values. Props JonathanRogers, Sewar. fixes #10656

File:

• trunk/wp-admin/includes/post.php (modified) (2 diffs)

trunk/wp-admin/includes/post.php

@@ -560 +560 @@
         $metakeyselect = isset($_POST['metakeyselect']) ? stripslashes( trim( $_POST['metakeyselect'] ) ) : '';
         $metakeyinput = isset($_POST['metakeyinput']) ? stripslashes( trim( $_POST['metakeyinput'] ) ) : '';
-        $metavalue = isset($_POST['metavalue']) ? maybe_serialize( stripslashes( trim( $_POST['metavalue'] ) ) ) : '';
+        $metavalue = isset($_POST['metavalue']) ? maybe_serialize( stripslashes_deep( $_POST['metavalue'] ) ) : '';
+        if ( is_string($metavalue) )
+                $metavalue = trim( $metavalue );
 
         if ( ('0' === $metavalue || !empty ( $metavalue ) ) && ((('#NONE#' != $metakeyselect) && !empty ( $metakeyselect) ) || !empty ( $metakeyinput) ) ) {
@@ -687 +689 @@
         wp_cache_delete($post_id, 'post_meta');
 
-        $meta_value = maybe_serialize( stripslashes( $meta_value ) );
+        $meta_value = maybe_serialize( stripslashes_deep( $meta_value ) );
         $meta_id = (int) $meta_id;