WordPress.org

Make WordPress Core


Ignore:
Timestamp:
03/01/2013 05:14:09 PM (8 years ago)
Author:
ryan
Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/edit-comments.php

    r23563 r23567  
    2121
    2222    if ( 'delete_all' == $doaction && !empty( $_REQUEST['pagegen_timestamp'] ) ) {
    23         $comment_status = $_REQUEST['comment_status'];
    24         $delete_time = $_REQUEST['pagegen_timestamp'];
     23        $comment_status = wp_unslash( $_REQUEST['comment_status'] );
     24        $delete_time = wp_unslash ( $_REQUEST['pagegen_timestamp'] );
    2525        $comment_ids = $wpdb->get_col( $wpdb->prepare( "SELECT comment_ID FROM $wpdb->comments WHERE comment_approved = %s AND %s > comment_date_gmt", $comment_status, $delete_time ) );
    2626        $doaction = 'delete';
Note: See TracChangeset for help on using the changeset viewer.