Changeset 23591 for trunk/wp-includes/comment.php

Timestamp:

03/03/2013 04:30:38 PM (12 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

see #WP21767

File:

• trunk/wp-includes/comment.php (modified) (5 diffs)

trunk/wp-includes/comment.php

@@ -635 +635 @@
     if ( isset($_COOKIE['comment_author_'.COOKIEHASH]) ) {
         $comment_author = apply_filters('pre_comment_author_name', $_COOKIE['comment_author_'.COOKIEHASH]);
-        $comment_author = stripslashes($comment_author);
+        $comment_author = wp_unslash($comment_author);
         $comment_author = esc_attr($comment_author);
         $_COOKIE['comment_author_'.COOKIEHASH] = $comment_author;
@@ -642 +642 @@
     if ( isset($_COOKIE['comment_author_email_'.COOKIEHASH]) ) {
         $comment_author_email = apply_filters('pre_comment_author_email', $_COOKIE['comment_author_email_'.COOKIEHASH]);
-        $comment_author_email = stripslashes($comment_author_email);
+        $comment_author_email = wp_unslash($comment_author_email);
         $comment_author_email = esc_attr($comment_author_email);
         $_COOKIE['comment_author_email_'.COOKIEHASH] = $comment_author_email;
@@ -649 +649 @@
     if ( isset($_COOKIE['comment_author_url_'.COOKIEHASH]) ) {
         $comment_author_url = apply_filters('pre_comment_author_url', $_COOKIE['comment_author_url_'.COOKIEHASH]);
-        $comment_author_url = stripslashes($comment_author_url);
+        $comment_author_url = wp_unslash($comment_author_url);
         $_COOKIE['comment_author_url_'.COOKIEHASH] = $comment_author_url;
     }
@@ -1263 +1263 @@
 function wp_insert_comment($commentdata) {
     global $wpdb;
-    extract(stripslashes_deep($commentdata), EXTR_SKIP);
+    extract(wp_unslash($commentdata), EXTR_SKIP);
 
     if ( ! isset($comment_author_IP) )
@@ -1503 +1503 @@
 
     // Now extract the merged array.
-    extract(stripslashes_deep($commentarr), EXTR_SKIP);
+    extract(wp_unslash($commentarr), EXTR_SKIP);
 
     $comment_content = apply_filters('comment_save_pre', $comment_content);