Changeset 23567 for trunk/wp-admin/includes/upgrade.php

Timestamp:

03/01/2013 05:14:09 PM (12 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

File:

• trunk/wp-admin/includes/upgrade.php (modified) (3 diffs)

trunk/wp-admin/includes/upgrade.php

@@ -133 +133 @@
 
         if ( empty($first_post) )
-            $first_post = stripslashes( __( 'Welcome to <a href="SITE_URL">SITE_NAME</a>. This is your first post. Edit or delete it, then start blogging!' ) );
+            $first_post = __( 'Welcome to <a href="SITE_URL">SITE_NAME</a>. This is your first post. Edit or delete it, then start blogging!' );
 
         $first_post = str_replace( "SITE_URL", esc_url( network_home_url() ), $first_post );
@@ -637 +637 @@
     foreach ( $users as $user ) :
         if ( !empty( $user->user_firstname ) )
-            update_user_meta( $user->ID, 'first_name', $wpdb->escape($user->user_firstname) );
+            update_user_meta( $user->ID, 'first_name', wp_slash($user->user_firstname) );
         if ( !empty( $user->user_lastname ) )
-            update_user_meta( $user->ID, 'last_name', $wpdb->escape($user->user_lastname) );
+            update_user_meta( $user->ID, 'last_name', wp_slash($user->user_lastname) );
         if ( !empty( $user->user_nickname ) )
-            update_user_meta( $user->ID, 'nickname', $wpdb->escape($user->user_nickname) );
+            update_user_meta( $user->ID, 'nickname', wp_slash($user->user_nickname) );
         if ( !empty( $user->user_level ) )
             update_user_meta( $user->ID, $wpdb->prefix . 'user_level', $user->user_level );
         if ( !empty( $user->user_icq ) )
-            update_user_meta( $user->ID, 'icq', $wpdb->escape($user->user_icq) );
+            update_user_meta( $user->ID, 'icq', wp_slash($user->user_icq) );
         if ( !empty( $user->user_aim ) )
-            update_user_meta( $user->ID, 'aim', $wpdb->escape($user->user_aim) );
+            update_user_meta( $user->ID, 'aim', wp_slash($user->user_aim) );
         if ( !empty( $user->user_msn ) )
-            update_user_meta( $user->ID, 'msn', $wpdb->escape($user->user_msn) );
+            update_user_meta( $user->ID, 'msn', wp_slash($user->user_msn) );
         if ( !empty( $user->user_yim ) )
-            update_user_meta( $user->ID, 'yim', $wpdb->escape($user->user_icq) );
+            update_user_meta( $user->ID, 'yim', wp_slash($user->user_icq) );
         if ( !empty( $user->user_description ) )
-            update_user_meta( $user->ID, 'description', $wpdb->escape($user->user_description) );
+            update_user_meta( $user->ID, 'description', wp_slash($user->user_description) );
 
         if ( isset( $user->user_idmode ) ):
@@ -855 +855 @@
             $cat_id = (int) $category->cat_id;
             $term_id = 0;
-            $name = $wpdb->escape($category->cat_name);
+            $name = wp_slash($category->cat_name);
             $slug = sanitize_title($name);
             $term_group = 0;