Changeset 23554 for trunk/wp-includes/taxonomy.php
- Timestamp:
- 03/01/2013 04:28:40 PM (12 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/wp-includes/taxonomy.php
r23552 r23554 959 959 return false; 960 960 } else if ( 'name' == $field ) { 961 // Assume already escaped 962 $value = stripslashes($value); 961 963 $field = 't.name'; 962 964 } else { … … 1498 1500 } 1499 1501 1500 $term = trim( $term);1502 $term = trim( stripslashes( $term ) ); 1501 1503 1502 1504 if ( '' === $slug = sanitize_title($term) ) … … 2059 2061 $args = sanitize_term($args, $taxonomy, 'db'); 2060 2062 extract($args, EXTR_SKIP); 2063 2064 // expected_slashed ($name) 2065 $name = stripslashes($name); 2066 $description = stripslashes($description); 2061 2067 2062 2068 if ( empty($slug) ) … … 2439 2445 return $term; 2440 2446 2447 // Escape data pulled from DB. 2448 $term = add_magic_quotes($term); 2449 2441 2450 // Merge old and new args with new args overwriting old ones. 2442 2451 $args = array_merge($term, $args); … … 2446 2455 $args = sanitize_term($args, $taxonomy, 'db'); 2447 2456 extract($args, EXTR_SKIP); 2457 2458 // expected_slashed ($name) 2459 $name = stripslashes($name); 2460 $description = stripslashes($description); 2448 2461 2449 2462 if ( '' == trim($name) )
Note: See TracChangeset
for help on using the changeset viewer.