Make WordPress Core


Ignore:
Timestamp:
03/03/2013 04:30:38 PM (13 years ago)
Author:
ryan
Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

see #WP21767

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-includes/meta.php

    r23554 r23591  
    4444
    4545        // expected_slashed ($meta_key)
    46         $meta_key = stripslashes($meta_key);
    47         $meta_value = stripslashes_deep($meta_value);
     46        $meta_key = wp_unslash($meta_key);
     47        $meta_value = wp_unslash($meta_value);
    4848        $meta_value = sanitize_meta( $meta_key, $meta_value, $meta_type );
    4949
     
    115115
    116116        // expected_slashed ($meta_key)
    117         $meta_key = stripslashes($meta_key);
     117        $meta_key = wp_unslash($meta_key);
    118118        $passed_value = $meta_value;
    119         $meta_value = stripslashes_deep($meta_value);
     119        $meta_value = wp_unslash($meta_value);
    120120        $meta_value = sanitize_meta( $meta_key, $meta_value, $meta_type );
    121121
     
    197197        $id_column = 'user' == $meta_type ? 'umeta_id' : 'meta_id';
    198198        // expected_slashed ($meta_key)
    199         $meta_key = stripslashes($meta_key);
    200         $meta_value = stripslashes_deep($meta_value);
     199        $meta_key = wp_unslash($meta_key);
     200        $meta_value = wp_unslash($meta_value);
    201201
    202202        $check = apply_filters( "delete_{$meta_type}_metadata", null, $object_id, $meta_key, $meta_value, $delete_all );
Note: See TracChangeset for help on using the changeset viewer.