Changeset 18501

Timestamp:

08/03/2011 06:20:15 PM (13 years ago)

Author:

ryan

Message:

Use *_metadata_by_mid() API in set_custom_fields(). Handle slashing when checking caps for key. see #18195

File:

• trunk/wp-includes/class-wp-xmlrpc-server.php (modified) (1 diff)

trunk/wp-includes/class-wp-xmlrpc-server.php

@@ -263 +263 @@
                 $meta['id'] = (int) $meta['id'];
                 $pmeta = get_metadata_by_mid( 'post', $meta['id'] );
+                $meta['value'] = stripslashes_deep( $meta['value'] );
                 if ( isset($meta['key']) ) {
+                    $meta['key'] = stripslashes( $meta['key'] );
                     if ( $meta['key'] != $pmeta->meta_key )
                         continue;
                     if ( current_user_can( 'edit_post_meta', $post_id, $meta['key'] ) )
-                        update_meta( $meta['id'], $meta['key'], $meta['value'] );
+                        update_metadata_by_mid( 'post', $meta['id'], $meta['value'] );
                 } elseif ( current_user_can( 'delete_post_meta', $post_id, $pmeta->meta_key ) ) {
-                        delete_meta( $meta['id'] );
+                    delete_metadata_by_mid( 'post', $meta['id'] );
                 }
-            } elseif ( current_user_can( 'add_post_meta', $post_id, $meta['key'] ) ) {
-                    add_post_meta( $post_id, $meta['key'], $meta['value'] );
+            } elseif ( current_user_can( 'add_post_meta', $post_id, stripslashes( $meta['key'] ) ) ) {
+                add_post_meta( $post_id, $meta['key'], $meta['value'] );
             }
         }