Changeset 1940 for trunk/wp-includes/classes.php

Timestamp:

12/12/2004 08:41:19 PM (22 years ago)

Author:

saxmatt

Message:

Axing htmlspecialchars because it double-encodes-encodes. Better error handling around queries.

File:

• trunk/wp-includes/classes.php (modified) (9 diffs)

trunk/wp-includes/classes.php

@@ -58 +58 @@
                 $this->query = $query;
                 $this->query_vars = $qv;
+                $qv['m'] =  (int) $qv['m'];
 
                 if ('' != $qv['name']) {
@@ -72 +73 @@
                 }
 
-                if ('' != $qv['second']) {
+                if ( (int) $qv['second']) {
                         $this->is_time = true;
                         $this->is_date = true;
                 }
 
-                if ('' != $qv['minute']) {
+                if ( (int) $qv['minute']) {
                         $this->is_time = true;
                         $this->is_date = true;
                 }
 
-                if ('' != $qv['hour']) {
+                if ( (int) $qv['hour']) {
                         $this->is_time = true;
-            $this->is_date = true;
-                }
-
-                if ('' != $qv['day']) {
+                        $this->is_date = true;
+                }
+
+                if ( (int) $qv['day']) {
                         if (! $this->is_date) {
                                 $this->is_day = true;
@@ -94 +95 @@
                 }
 
-                if ('' != $qv['monthnum']) {
+                if ( (int)  $qv['monthnum']) {
                         if (! $this->is_date) {
                                 $this->is_month = true;
@@ -101 +102 @@
                 }
 
-                if ('' != $qv['year']) {
+                if ( (int)  $qv['year']) {
                         if (! $this->is_date) {
                                 $this->is_year = true;
@@ -108 +109 @@
                 }
 
-                if ('' != $qv['m']) {
+                if ( (int)  $qv['m']) {
                         $this->is_date = true;
-
                         if (strlen($qv['m']) > 9) {
-              $this->is_time = true;
-            } else if (strlen($qv['m']) > 7) {
-              $this->is_day = true;
-            } else if (strlen($qv['m']) > 5) {
-              $this->is_month = true;
-            } else {
-              $this->is_year = true;
-            }
+                                $this->is_time = true;
+                        } else if (strlen($qv['m']) > 7) {
+                                $this->is_day = true;
+                        } else if (strlen($qv['m']) > 5) {
+                                $this->is_month = true;
+                        } else {
+                                $this->is_year = true;
+                        }
                 }
 
@@ -233 +233 @@
 
                 // If a month is specified in the querystring, load that month
-                if ('' != $q['m']) {
+                if ( (int) $q['m'] ) {
                         $q['m'] = '' . preg_replace('|[^0-9]|', '', $q['m']);
                         $where .= ' AND YEAR(post_date)=' . substr($q['m'], 0, 4);
@@ -248 +248 @@
                 }
 
-                if ('' != $q['hour']) {
+                if ( (int) $q['hour'] ) {
                         $q['hour'] = '' . intval($q['hour']);
                         $where .= " AND HOUR(post_date)='" . $q['hour'] . "'";
                 }
 
-                if ('' != $q['minute']) {
+                if ( (int) $q['minute'] ) {
                         $q['minute'] = '' . intval($q['minute']);
                         $where .= " AND MINUTE(post_date)='" . $q['minute'] . "'";
                 }
 
-                if ('' != $q['second']) {
+                if ( (int) $q['second'] ) {
                         $q['second'] = '' . intval($q['second']);
                         $where .= " AND SECOND(post_date)='" . $q['second'] . "'";
                 }
 
-                if ('' != $q['year']) {
+                if ( (int) $q['year'] ) {
                         $q['year'] = '' . intval($q['year']);
                         $where .= " AND YEAR(post_date)='" . $q['year'] . "'";
                 }
 
-                if ('' != $q['monthnum']) {
+                if ( (int) $q['monthnum'] ) {
                         $q['monthnum'] = '' . intval($q['monthnum']);
                         $where .= " AND MONTH(post_date)='" . $q['monthnum'] . "'";
                 }
 
-                if ('' != $q['day']) {
+                if ( (int) $q['day'] ) {
                         $q['day'] = '' . intval($q['day']);
                         $where .= " AND DAYOFMONTH(post_date)='" . $q['day'] . "'";
@@ -288 +288 @@
 
 
-                if ('' != $q['w']) {
+                if ( (int) $q['w'] ) {
                         $q['w'] = ''.intval($q['w']);
                         $where .= " AND WEEK(post_date, 1)='" . $q['w'] . "'";
@@ -295 +295 @@
                 // If a post number is specified, load that post
                 if (($q['p'] != '') && ($q['p'] != 'all')) {
-                        $q['p'] = intval($q['p']);
-                        $where = ' AND ID = '.$q['p'];
+                        $q['p'] =  (int) $q['p'];
+                        $where = ' AND ID = ' . $q['p'];
                 }