Changeset 23567 for trunk/wp-admin/upgrade.php

Timestamp:

03/01/2013 05:14:09 PM (12 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

File:

• trunk/wp-admin/upgrade.php (modified) (2 diffs)

trunk/wp-admin/upgrade.php

@@ -78 +78 @@
 switch ( $step ) :
     case 0:
-        $goback = stripslashes( wp_get_referer() );
+        $goback = wp_unslash( wp_get_referer() );
         $goback = esc_url_raw( $goback );
         $goback = urlencode( $goback );
@@ -91 +91 @@
         wp_upgrade();
 
-            $backto = !empty($_GET['backto']) ? stripslashes( urldecode( $_GET['backto'] ) ) : __get_option( 'home' ) . '/';
+            $backto = !empty($_GET['backto']) ? wp_unslash( urldecode( $_GET['backto'] ) ) : __get_option( 'home' ) . '/';
             $backto = esc_url( $backto );
             $backto = wp_validate_redirect($backto, __get_option( 'home' ) . '/');