Changeset 23567 for trunk/wp-admin/includes/theme-install.php

Timestamp:

03/01/2013 05:14:09 PM (12 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

File:

• trunk/wp-admin/includes/theme-install.php (modified) (2 diffs)

trunk/wp-admin/includes/theme-install.php

@@ -51 +51 @@
  */
 function install_theme_search_form( $type_selector = true ) {
-    $type = isset( $_REQUEST['type'] ) ? stripslashes( $_REQUEST['type'] ) : 'term';
-    $term = isset( $_REQUEST['s'] ) ? stripslashes( $_REQUEST['s'] ) : '';
+    $type = isset( $_REQUEST['type'] ) ? wp_unslash( $_REQUEST['type'] ) : 'term';
+    $term = isset( $_REQUEST['s'] ) ? wp_unslash( $_REQUEST['s'] ) : '';
     if ( ! $type_selector )
         echo '<p class="install-help">' . __( 'Search for themes by keyword.' ) . '</p>';
@@ -180 +180 @@
     global $tab, $themes_allowedtags, $wp_list_table;
 
-    $theme = themes_api( 'theme_information', array( 'slug' => stripslashes( $_REQUEST['theme'] ) ) );
+    $theme = themes_api( 'theme_information', array( 'slug' => wp_unslash( $_REQUEST['theme'] ) ) );
 
     if ( is_wp_error( $theme ) )