Changeset 23563 for trunk/wp-admin/includes/media.php

Timestamp:

03/01/2013 05:00:25 PM (14 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

see #21767

File:

• trunk/wp-admin/includes/media.php (modified) (4 diffs)

trunk/wp-admin/includes/media.php

@@ -469 +469 @@
                 if ( isset($attachment['image_alt']) ) {
                         $image_alt = get_post_meta($attachment_id, '_wp_attachment_image_alt', true);
-                        if ( $image_alt != stripslashes($attachment['image_alt']) ) {
-                                $image_alt = wp_strip_all_tags( stripslashes($attachment['image_alt']), true );
+                        if ( $image_alt != wp_unslash($attachment['image_alt']) ) {
+                                $image_alt = wp_strip_all_tags( wp_unslash($attachment['image_alt']), true );
                                 // update_meta expects slashed
                                 update_post_meta( $attachment_id, '_wp_attachment_image_alt', addslashes($image_alt) );
@@ -502 +502 @@
 
         if ( isset($send_id) ) {
-                $attachment = stripslashes_deep( $_POST['attachments'][$send_id] );
+                $attachment = wp_unslash( $_POST['attachments'][$send_id] );
 
                 $html = isset( $attachment['post_title'] ) ? $attachment['post_title'] : '';
@@ -547 +547 @@
 
                 if ( isset( $_POST['media_type'] ) && 'image' != $_POST['media_type'] ) {
-                        $title = esc_html( stripslashes( $_POST['title'] ) );
+                        $title = esc_html( wp_unslash( $_POST['title'] ) );
                         if ( empty( $title ) )
                                 $title = esc_html( basename( $src ) );
@@ -562 +562 @@
                 } else {
                         $align = '';
-                        $alt = esc_attr( stripslashes( $_POST['alt'] ) );
+                        $alt = esc_attr( wp_unslash( $_POST['alt'] ) );
                         if ( isset($_POST['align']) ) {
-                                $align = esc_attr( stripslashes( $_POST['align'] ) );
+                                $align = esc_attr( wp_unslash( $_POST['align'] ) );
                                 $class = " class='align$align'";
                         }