Changeset 13297 for trunk/wp-admin/includes/ms.php

Timestamp:

02/22/2010 06:15:10 PM (15 years ago)

Author:

nacin

Message:

Use esc_url() instead of clean_url(). See #12309

File:

• trunk/wp-admin/includes/ms.php (modified) (2 diffs)

trunk/wp-admin/includes/ms.php

@@ -262 +262 @@
 ###SITEURL###"), $new_admin_email );
 
-    $content = str_replace('###ADMIN_URL###', clean_url(get_option( "siteurl" ).'/wp-admin/options.php?adminhash='.$hash), $content);
+    $content = str_replace('###ADMIN_URL###', esc_url(get_option( "siteurl" ).'/wp-admin/options.php?adminhash='.$hash), $content);
     $content = str_replace('###EMAIL###', $value, $content);
     $content = str_replace('###SITENAME###', get_site_option( 'site_name' ), $content);
@@ -313 +313 @@
 ###SITEURL###"), $new_user_email );
 
-        $content = str_replace('###ADMIN_URL###', clean_url(get_option( "siteurl" ).'/wp-admin/profile.php?newuseremail='.$hash), $content);
+        $content = str_replace('###ADMIN_URL###', esc_url(get_option( "siteurl" ).'/wp-admin/profile.php?newuseremail='.$hash), $content);
         $content = str_replace('###EMAIL###', $_POST[ 'email' ], $content);
         $content = str_replace('###SITENAME###', get_site_option( 'site_name' ), $content);