Changeset 23554 for trunk/wp-admin/update.php
- Timestamp:
- 03/01/2013 04:28:40 PM (12 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/wp-admin/update.php
r23416 r23554 27 27 28 28 if ( isset( $_GET['plugins'] ) ) 29 $plugins = explode( ',', wp_unslash($_GET['plugins']) );29 $plugins = explode( ',', stripslashes($_GET['plugins']) ); 30 30 elseif ( isset( $_POST['checked'] ) ) 31 31 $plugins = (array) $_POST['checked']; … … 110 110 $url = 'update.php?action=install-plugin&plugin=' . $plugin; 111 111 if ( isset($_GET['from']) ) 112 $url .= '&from=' . urlencode( wp_unslash( $_GET['from'] ));112 $url .= '&from=' . urlencode(stripslashes($_GET['from'])); 113 113 114 114 $type = 'web'; //Install plugin type, From Web or an Upload. … … 174 174 175 175 if ( isset( $_GET['themes'] ) ) 176 $themes = explode( ',', wp_unslash( $_GET['themes']) );176 $themes = explode( ',', stripslashes($_GET['themes']) ); 177 177 elseif ( isset( $_POST['checked'] ) ) 178 178 $themes = (array) $_POST['checked'];
Note: See TracChangeset
for help on using the changeset viewer.