Changeset 13297 for trunk/wp-admin/ms-users.php

Timestamp:

02/22/2010 06:15:10 PM (15 years ago)

Author:

nacin

Message:

Use esc_url() instead of clean_url(). See #12309

File:

• trunk/wp-admin/ms-users.php (modified) (1 diff)

trunk/wp-admin/ms-users.php

@@ -181 +181 @@
                             case 'login':
                                 $avatar = get_avatar( $user['user_email'], 32 );
-                                $edit   = clean_url( add_query_arg( 'wp_http_referer', urlencode( clean_url( stripslashes( $_SERVER['REQUEST_URI'] ) ) ), "user-edit.php?user_id=".$user['ID'] ) );
+                                $edit   = esc_url( add_query_arg( 'wp_http_referer', urlencode( esc_url( stripslashes( $_SERVER['REQUEST_URI'] ) ) ), "user-edit.php?user_id=".$user['ID'] ) );
                                 // @todo Make delete link work like delete button with transfering users (in ms-edit.php)
-                                //$delete   = clean_url( add_query_arg( 'wp_http_referer', urlencode( clean_url( stripslashes( $_SERVER['REQUEST_URI'] ) ) ), wp_nonce_url( 'ms-edit.php', 'deleteuser' ) . '&action=deleteuser&id=' . $user['ID'] ) );
+                                //$delete   = esc_url( add_query_arg( 'wp_http_referer', urlencode( esc_url( stripslashes( $_SERVER['REQUEST_URI'] ) ) ), wp_nonce_url( 'ms-edit.php', 'deleteuser' ) . '&action=deleteuser&id=' . $user['ID'] ) );
                                 ?>
                                 <td class="username column-username">