Changeset 23567 for trunk/wp-admin/plugin-editor.php

Timestamp:

03/01/2013 05:14:09 PM (12 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

File:

• trunk/wp-admin/plugin-editor.php (modified) (3 diffs)

trunk/wp-admin/plugin-editor.php

@@ -29 +29 @@
 
 if ( isset($_REQUEST['file']) )
-    $plugin = stripslashes($_REQUEST['file']);
+    $plugin = wp_unslash($_REQUEST['file']);
 
 if ( empty($plugin) ) {
@@ -40 +40 @@
 if ( empty($file) )
     $file = $plugin_files[0];
-else
-    $file = stripslashes($file);
 
 $file = validate_file_to_edit($file, $plugin_files);
@@ -53 +51 @@
     check_admin_referer('edit-plugin_' . $file);
 
-    $newcontent = stripslashes($_POST['newcontent']);
+    $newcontent = wp_unslash( $_POST['newcontent'] );
     if ( is_writeable($real_file) ) {
         $f = fopen($real_file, 'w+');