Changeset 23563 for trunk/wp-admin/includes/class-wp-upgrader.php

Timestamp:

03/01/2013 05:00:25 PM (12 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

see #21767

File:

• trunk/wp-admin/includes/class-wp-upgrader.php (modified) (1 diff)

trunk/wp-admin/includes/class-wp-upgrader.php

@@ -1428 +1428 @@
         $install_actions = array();
 
-        $from = isset($_GET['from']) ? stripslashes($_GET['from']) : 'plugins';
+        $from = isset($_GET['from']) ? wp_unslash( $_GET['from'] ) : 'plugins';
 
         if ( 'import' == $from )