Changeset 23591 for trunk/wp-admin/user-new.php

Timestamp:

03/03/2013 04:30:38 PM (12 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

see #WP21767

File:

• trunk/wp-admin/user-new.php (modified) (2 diffs)

trunk/wp-admin/user-new.php

@@ -117 +117 @@
             $add_user_errors = $user_details[ 'errors' ];
         } else {
-            $new_user_login = apply_filters('pre_user_login', sanitize_user(stripslashes($_REQUEST['user_login']), true));
+            $new_user_login = apply_filters('pre_user_login', sanitize_user(wp_unslash($_REQUEST['user_login']), true));
             if ( isset( $_POST[ 'noconfirmation' ] ) && is_super_admin() ) {
                 add_filter( 'wpmu_signup_user_notification', '__return_false' ); // Disable confirmation email
@@ -310 +310 @@
     if( isset( $_POST['createuser'] ) ) {
         if ( ! isset($$var) )
-            $$var = isset( $_POST[$post_field] ) ? stripslashes( $_POST[$post_field] ) : '';
+            $$var = isset( $_POST[$post_field] ) ? wp_unslash( $_POST[$post_field] ) : '';
     } else {
         $$var = false;