Changeset 23563 for trunk/wp-admin/includes/bookmark.php

Timestamp:

03/01/2013 05:00:25 PM (13 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

see #21767

File:

• trunk/wp-admin/includes/bookmark.php (modified) (3 diffs)

trunk/wp-admin/includes/bookmark.php

@@ -56 +56 @@
     $link = new stdClass;
     if ( isset( $_GET['linkurl'] ) )
-        $link->link_url = esc_url( $_GET['linkurl'] );
+        $link->link_url = esc_url( wp_unslash( $_GET['linkurl'] ) );
     else
         $link->link_url = '';
 
     if ( isset( $_GET['name'] ) )
-        $link->link_name = esc_attr( $_GET['name'] );
+        $link->link_name = esc_attr( wp_unslash( $_GET['name'] ) );
     else
         $link->link_name = '';
@@ -138 +138 @@
     $linkdata = sanitize_bookmark( $linkdata, 'db' );
 
-    extract( stripslashes_deep( $linkdata ), EXTR_SKIP );
+    extract( wp_unslash( $linkdata ), EXTR_SKIP );
 
     $update = false;
@@ -252 +252 @@
 
     // Escape data pulled from DB.
-    $link = add_magic_quotes( $link );
+    $link = wp_slash( $link );
 
     // Passed link category list overwrites existing category list if not empty.