Changeset 23554 for trunk/wp-admin/includes/plugin-install.php

Timestamp:

03/01/2013 04:28:40 PM (12 years ago)

Author:

ryan

Message:

Revert 23416, 23419, 23445 except for wp_reset_vars() changes. We are going a different direction with the slashing cleanup, so resetting to a clean slate. see #21767

File:

• trunk/wp-admin/includes/plugin-install.php (modified) (5 diffs)

trunk/wp-admin/includes/plugin-install.php

@@ -117 +117 @@
  */
 function install_search_form( $type_selector = true ) {
-    $type = isset($_REQUEST['type']) ? wp_unslash( $_REQUEST['type'] ) : 'term';
-    $term = isset($_REQUEST['s']) ? wp_unslash( $_REQUEST['s'] ) : '';
+    $type = isset($_REQUEST['type']) ? stripslashes( $_REQUEST['type'] ) : 'term';
+    $term = isset($_REQUEST['s']) ? stripslashes( $_REQUEST['s'] ) : '';
 
     ?><form id="search-plugins" method="get" action="">
@@ -161 +161 @@
  */
 function install_plugins_favorites_form() {
-    $user = ! empty( $_GET['user'] ) ? wp_unslash( $_GET['user'] ) : get_user_option( 'wporg_favorites' );
+    $user = ! empty( $_GET['user'] ) ? stripslashes( $_GET['user'] ) : get_user_option( 'wporg_favorites' );
     ?>
     <p class="install-help"><?php _e( 'If you have marked plugins as favorites on WordPress.org, you can browse them here.' ); ?></p>
@@ -252 +252 @@
     }
     if ( isset($_GET['from']) )
-        $url .= '&amp;from=' . urlencode( wp_unslash( $_GET['from'] ) );
+        $url .= '&amp;from=' . urlencode(stripslashes($_GET['from']));
 
     return compact('status', 'url', 'version');
@@ -265 +265 @@
     global $tab;
 
-    $api = plugins_api('plugin_information', array('slug' => wp_unslash( $_REQUEST['plugin'] ) ));
+    $api = plugins_api('plugin_information', array('slug' => stripslashes( $_REQUEST['plugin'] ) ));
 
     if ( is_wp_error($api) )
@@ -296 +296 @@
     }
 
-    $section = isset($_REQUEST['section']) ? wp_unslash( $_REQUEST['section'] ) : 'description'; //Default to the Description tab, Do not translate, API returns English.
+    $section = isset($_REQUEST['section']) ? stripslashes( $_REQUEST['section'] ) : 'description'; //Default to the Description tab, Do not translate, API returns English.
     if ( empty($section) || ! isset($api->sections[ $section ]) )
         $section = array_shift( $section_titles = array_keys((array)$api->sections) );