Changeset 23567 for trunk/wp-admin/options.php

Timestamp:

03/01/2013 05:14:09 PM (12 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

File:

• trunk/wp-admin/options.php (modified) (3 diffs)

trunk/wp-admin/options.php

@@ -121 +121 @@
         if ( is_multisite() && ! is_super_admin() )
             wp_die( __( 'You do not have sufficient permissions to modify unregistered settings for this site.' ) );
-        $options = explode( ',', stripslashes( $_POST[ 'page_options' ] ) );
+        $options = explode( ',', wp_unslash( $_POST[ 'page_options' ] ) );
     } else {
         $options = $whitelist_options[ $option_page ];
@@ -128 +128 @@
     // Handle custom date/time formats
     if ( 'general' == $option_page ) {
-        if ( !empty($_POST['date_format']) && isset($_POST['date_format_custom']) && '\c\u\s\t\o\m' == stripslashes( $_POST['date_format'] ) )
+        if ( !empty($_POST['date_format']) && isset($_POST['date_format_custom']) && '\c\u\s\t\o\m' == wp_unslash( $_POST['date_format'] ) )
             $_POST['date_format'] = $_POST['date_format_custom'];
-        if ( !empty($_POST['time_format']) && isset($_POST['time_format_custom']) && '\c\u\s\t\o\m' == stripslashes( $_POST['time_format'] ) )
+        if ( !empty($_POST['time_format']) && isset($_POST['time_format_custom']) && '\c\u\s\t\o\m' == wp_unslash( $_POST['time_format'] ) )
             $_POST['time_format'] = $_POST['time_format_custom'];
         // Map UTC+- timezones to gmt_offsets and set timezone_string to empty.
@@ -151 +151 @@
                 if ( ! is_array( $value ) )
                     $value = trim( $value );
-                $value = stripslashes_deep( $value );
+                $value = wp_unslash( $value );
             }
             update_option( $option, $value );