Changeset 23567 for trunk/wp-admin/network/site-settings.php

Timestamp:

03/01/2013 05:14:09 PM (12 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

File:

• trunk/wp-admin/network/site-settings.php (modified) (1 diff)

trunk/wp-admin/network/site-settings.php

@@ -54 +54 @@
     $skip_options = array( 'allowedthemes' ); // Don't update these options since they are handled elsewhere in the form.
     foreach ( (array) $_POST['option'] as $key => $val ) {
+        $key = wp_unslash( $key );
+        $val = wp_unslash( $val );
         if ( $key === 0 || is_array( $val ) || in_array($key, $skip_options) )
             continue; // Avoids "0 is a protected WP option and may not be modified" error when edit blog options
         if ( $c == $count )
-            update_option( $key, stripslashes( $val ) );
+            update_option( $key, $val );
         else
-            update_option( $key, stripslashes( $val ), false ); // no need to refresh blog details yet
+            update_option( $key, $val, false ); // no need to refresh blog details yet
         $c++;
     }