![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png){kind=logo}
Changeset 1940 for trunk/wp-admin/bookmarklet.php
- Timestamp:
- 12/12/2004 08:41:19 PM (22 years ago)
- File:
-
- 1 edited
-
trunk/wp-admin/bookmarklet.php (modified) (4 diffs)
Legend:
- Unmodified
- Added
- Removed
-
trunk/wp-admin/bookmarklet.php
r1839 r1940 21 21 <?php 22 22 } else { 23 $popuptitle = htmlspecialchars(stripslashes($popuptitle));24 $text = htmlspecialchars(stripslashes(urldecode($text)));23 $popuptitle = wp_specialchars(stripslashes($popuptitle)); 24 $text = wp_specialchars(stripslashes(urldecode($text))); 25 25 26 26 /* big funky fixes for browsers' javascript bugs */ … … 41 41 } 42 42 43 $post_title = $_REQUEST['post_title'];43 $post_title = wp_specialchars($_REQUEST['post_title']); 44 44 if (!empty($post_title)) { 45 45 $post_title = stripslashes($post_title); … … 47 47 $post_title = $popuptitle; 48 48 } 49 // I'm not sure why we're using $edited_post_title in the edit-form.php, but we are 50 // and that is what is being included below. For this reason, I am just duplicating 51 // the var instead of changing the assignment on the lines above. 52 // -- Alex King 2004-01-07 53 $edited_post_title = htmlspecialchars($post_title); 49 50 $edited_post_title = wp_specialchars($post_title); 54 51 55 52 // $post_pingback needs to be set in any file that includes edit-form.php 56 53 $post_pingback = get_settings('default_pingback_flag'); 57 54 58 $content = htmlspecialchars($_REQUEST['content']); 59 if (!empty($content)) { 60 $content = stripslashes($content); 55 $content = wp_specialchars($_REQUEST['content']); 56 $popupurl = wp_specialchars($_REQUEST['popupurl']); 57 if ( !empty($content) ) { 58 $content = wp_specialchars( stripslashes($_REQUEST['content']) ); 61 59 } else { 62 60 $content = '<a href="'.$popupurl.'">'.$popuptitle.'</a>'."\n$text"; … … 72 70 <link rel="stylesheet" href="wp-admin.css" type="text/css" /> 73 71 <link rel="shortcut icon" href="../wp-images/wp-favicon.png" /> 74 <script type="text/javascript">75 <!--76 function launchupload() {77 window.open ("upload.php", "wpupload", "width=380,height=360,location=0,menubar=0,resizable=1,scrollbars=yes,status=1,toolbar=0");78 }79 72 80 //-->81 </script>82 73 <style type="text/css"> 83 74 <!--
Note:
See TracChangeset
for help on using the changeset viewer.
