Changeset 19081

Timestamp:

10/28/2011 10:40:09 PM (15 years ago)

Author:

nacin

Message:

Use esc_attr() consistently in wp_dropdown_pages().

File:

• trunk/wp-includes/post-template.php (modified) (2 diffs)

trunk/wp-includes/post-template.php

@@ -779 +779 @@
         $pages = get_pages($r);
         $output = '';
-        $name = esc_attr($name);
         // Back-compat with old system where both id and name were based on $name argument
         if ( empty($id) )
@@ -785 +784 @@
 
         if ( ! empty($pages) ) {
-                $output = "<select name=\"$name\" id=\"$id\">\n";
+                $output = "<select name='" . esc_attr( $name ) . "' id='" . esc_attr( $id ) . "'>\n";
                 if ( $show_option_no_change )
                         $output .= "\t<option value=\"-1\">$show_option_no_change</option>";