Changeset 1436

Timestamp:

06/19/2004 02:13:48 AM (22 years ago)

Author:

jverber

Message:

Fix for bug #0000092: Special chars were not encoded correctly.

Location:

trunk/wp-admin

Files:

• link-categories.php (modified) (3 diffs)
• link-manager.php (modified) (2 diffs)

trunk/wp-admin/link-categories.php

@@ -122 +122 @@
 
 <div class="wrap">
-  <h2>Edit &#8220;<?php echo $row->cat_name?>&#8221; Category </h2>
+  <h2>Edit &#8220;<?php echo htmlspecialchars($row->cat_name)?>&#8221; Category </h2>
 
   <form name="editcat" method="post">
@@ -132 +132 @@
 <tr>
     <th width="33%" scope="row"><?php _e('Name:') ?></th>
-    <td width="67%"><input name="cat_name" type="text" value="<?php echo $row->cat_name?>" size="30" /></td>
+    <td width="67%"><input name="cat_name" type="text" value="<?php echo htmlspecialchars($row->cat_name)?>" size="30" /></td>
 </tr>
 <tr>
@@ -333 +333 @@
 ?>
               <tr valign="middle" align="center" <?php echo $style ?> style="border-bottom: 1px dotted #9C9A9C;">
-                <td><?php echo $row->cat_name?></td>
+                <td><?php echo htmlspecialchars($row->cat_name)?></td>
                 <td ><?php echo $row->cat_id?></td>
                 <td><?php echo $row->auto_toggle?></td>

trunk/wp-admin/link-manager.php

@@ -313 +313 @@
 
     if ($row) {
-      $link_url = $row->link_url;
-      $link_name = $row->link_name;
+      $link_url = htmlspecialchars($row->link_url);
+      $link_name = htmlspecialchars($row->link_name);
       $link_image = $row->link_image;
       $link_target = $row->link_target;
       $link_category = $row->link_category;
-      $link_description = $row->link_description;
+      $link_description = htmlspecialchars($row->link_description);
       $link_visible = $row->link_visible;
       $link_rating = $row->link_rating;
       $link_rel = $row->link_rel;
-      $link_notes = $row->link_notes;
-      $link_rss_uri = $row->link_rss;
+      $link_notes = htmlspecialchars($row->link_notes);
+      $link_rss_uri = htmlspecialchars($row->link_rss);
     }
 
@@ -691 +691 @@
     if ($links) {
         foreach ($links as $link) {
+            $link->link_name = htmlspecialchars($link->link_name);
+            $link->link_category = htmlspecialchars($link->link_category);
+            $link->link_description = htmlspecialchars($link->link_description);
+            $link->link_url = htmlspecialchars($link->link_url);
             $short_url = str_replace('http://', '', $link->link_url);
             $short_url = str_replace('www.', '', $short_url);