Changeset 23567 for trunk/wp-admin/includes/upgrade.php

Timestamp:

03/01/2013 05:14:09 PM (14 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

File:

• trunk/wp-admin/includes/upgrade.php (modified) (3 diffs)

trunk/wp-admin/includes/upgrade.php

@@ -133 +133 @@
 
                 if ( empty($first_post) )
-                        $first_post = stripslashes( __( 'Welcome to <a href="SITE_URL">SITE_NAME</a>. This is your first post. Edit or delete it, then start blogging!' ) );
+                        $first_post = __( 'Welcome to <a href="SITE_URL">SITE_NAME</a>. This is your first post. Edit or delete it, then start blogging!' );
 
                 $first_post = str_replace( "SITE_URL", esc_url( network_home_url() ), $first_post );
@@ -637 +637 @@
         foreach ( $users as $user ) :
                 if ( !empty( $user->user_firstname ) )
-                        update_user_meta( $user->ID, 'first_name', $wpdb->escape($user->user_firstname) );
+                        update_user_meta( $user->ID, 'first_name', wp_slash($user->user_firstname) );
                 if ( !empty( $user->user_lastname ) )
-                        update_user_meta( $user->ID, 'last_name', $wpdb->escape($user->user_lastname) );
+                        update_user_meta( $user->ID, 'last_name', wp_slash($user->user_lastname) );
                 if ( !empty( $user->user_nickname ) )
-                        update_user_meta( $user->ID, 'nickname', $wpdb->escape($user->user_nickname) );
+                        update_user_meta( $user->ID, 'nickname', wp_slash($user->user_nickname) );
                 if ( !empty( $user->user_level ) )
                         update_user_meta( $user->ID, $wpdb->prefix . 'user_level', $user->user_level );
                 if ( !empty( $user->user_icq ) )
-                        update_user_meta( $user->ID, 'icq', $wpdb->escape($user->user_icq) );
+                        update_user_meta( $user->ID, 'icq', wp_slash($user->user_icq) );
                 if ( !empty( $user->user_aim ) )
-                        update_user_meta( $user->ID, 'aim', $wpdb->escape($user->user_aim) );
+                        update_user_meta( $user->ID, 'aim', wp_slash($user->user_aim) );
                 if ( !empty( $user->user_msn ) )
-                        update_user_meta( $user->ID, 'msn', $wpdb->escape($user->user_msn) );
+                        update_user_meta( $user->ID, 'msn', wp_slash($user->user_msn) );
                 if ( !empty( $user->user_yim ) )
-                        update_user_meta( $user->ID, 'yim', $wpdb->escape($user->user_icq) );
+                        update_user_meta( $user->ID, 'yim', wp_slash($user->user_icq) );
                 if ( !empty( $user->user_description ) )
-                        update_user_meta( $user->ID, 'description', $wpdb->escape($user->user_description) );
+                        update_user_meta( $user->ID, 'description', wp_slash($user->user_description) );
 
                 if ( isset( $user->user_idmode ) ):
@@ -855 +855 @@
                         $cat_id = (int) $category->cat_id;
                         $term_id = 0;
-                        $name = $wpdb->escape($category->cat_name);
+                        $name = wp_slash($category->cat_name);
                         $slug = sanitize_title($name);
                         $term_group = 0;