Changeset 23567 for trunk/wp-admin/theme-editor.php

Timestamp:

03/01/2013 05:14:09 PM (13 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

File:

• trunk/wp-admin/theme-editor.php (modified) (2 diffs)

trunk/wp-admin/theme-editor.php

@@ -69 +69 @@
         $file = $allowed_files['style.css'];
 } else {
-        $relative_file = stripslashes( $file );
+        $relative_file = wp_unslash( $file );
         $file = $theme->get_stylesheet_directory() . '/' . $relative_file;
 }
@@ -79 +79 @@
 case 'update':
         check_admin_referer( 'edit-theme_' . $file . $stylesheet );
-        $newcontent = stripslashes( $_POST['newcontent'] );
+        $newcontent = wp_unslash( $_POST['newcontent'] );
         $location = 'theme-editor.php?file=' . urlencode( $relative_file ) . '&theme=' . urlencode( $stylesheet ) . '&scrollto=' . $scrollto;
         if ( is_writeable( $file ) ) {